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FOREWORD 


This quarterly progress report is submitted in accordance with 
the requirements of Contract NAS8-25619, "Space Shuttle Propulsion 
Systems On-board Checkout and Monitoring System Development Study". 



iii 


CONTENTS 

Page 

Foreword ii 

Contents iii 

Summary 

I. Introduction I-l 

thru 

1-2 

II. Status and Results - Task I II-l 

and 

II- 2 

III. Status and Results - Task II III-l 

thru 

III- 69 

IV. Status and Results - Task III IV- 1 

A. Task III Discussion IV-2 

B. Propulsion System Definition IV-4 

C. Propulsion System Analyses IV-35 

D. Checkout and Monitoring Requirements Analyses * . . IV-55 

E. Checkout and Monitoring Requirements 

Implementation IV-76 

thru 

IV- 92 

Appendix A A-1 

thru 

A-7 



iv 

CONTENTS (Continued) 

Figure Page 

I-l Project Schedule 1-2 

IV-1 Vehicle Configuration IV-5 

IV-2 Grumman H-33 Orbiter IV-6 

IV-3 Booster Configuration IV-7 

IV-4 Main Propulsion System Schematic IV-11 

IV-5 Main Engine Schematic IV- 14 

IV-6 Main Propellant Management Subsystem IV- 15 

IV-7 Main Pressurization Subsystem IV-18 

IV-8 Solid Rocket Motor System IV-21 

IV-9 Rocket Motor Subsystem IV-23 

IV-10 Thrust Vector Control Subsystem IV-25 

IV-11 Space Shuttle, Titan III L4 Drop Tank Orbiter, 

Operational Timeline IV-27 

IV-12 Vehicle Assembly Flow IV-29 

IV-13 Ascent Trajectory Sequencing Profile IV-34 

IV- 14 T-III L Operational Flow Diagram IV-37 

IV-15 Propulsion Test Equipment List IV-38 

thru 

IV-40 

IV-16 T-III L Control Sequence and Logic Summary IV-41 

IV-17 Electrical Ground Support Equipment IV-43 

IV-18 Safe and Arm Device Squib Location and Aim IV-48 

IV-19 Dismantled Safe and Arm Device IV-49 

IV-20 SRM Igniter Assembly lV-30 

IV-21 SRM Ignition Circuitry lV-51 

IV-22 Titan IIl-L Propulsion Related Avionics . IV-78 

IV-23 DIU/Orbiter/GSE Interfaces IV-79 



V 


CONTENTS (Continued) 

Figure Page 

IV-24 Propulsion System Sensor Locations IV-87 

IV-25 Solid Rocket Motor Sensor Locations IV-88 

IV-26 Titan III L Instrumentation . IV-89 

IV-27 Titan III L SRM Avionics IV-92 

Table 

II-l Task I Status Summary II-2 

IV-1 Propulsion System and Subsystem Numerical 

Identification (Booster) IV- 10 

IV-2 Booster Propulsion Checkout IV-28 

IV-3 Sequence of Events IV-33 

IV-4 Pyrotechnics Checkout Sequence IV-53 

and 
IV- 54 

IV-5 Vehicle Ground Cheeky Systems Trade Study IV-58 

and 

IV-59 

IV-6 Control Trade Study IV-62 

IV-7 Data Acquisition Requirements IV-63 

thru 
IV- 6 7 

IV-8 Titan III L Propulsion Measurement List/ 

Designated Usage IV-68 

thru 
IV- 70 

IV-9 Measurement Selection Criteria IV-71 

thru 
IV- 75 

IV-10 Titan III Propulsion Instrumentation Summary IV-82 

and 

IV-83 



STATUS SUMMARY 


1. Program reviews were conducted at MSEC in October and December. 
Primary emphasis was placed on in-depth reviews and discussions 
of preliminary drafts of Sections 1 and 3 of the Guidelines Doc- 
ument prepared under Task II. General concurrence and agreement 
were reached on the format and content of this material. 

2. Section 1 and Section 3 of the Guidelines Document (Task II) were 
completed in draft form and are included herein for final review. 
Definitions of terms were prepared and also are Included. Sections 
2 , 4 and 5.2 are being drafted. 

3. Under the Task III effort^ the analysis of checkout and monitoring 
requirements of the Titan III L expendable booster propulsion systems 
was completed, and the techniques for accomplishing the requisite 
checkout and monitoring functions were determined. Documentation 

of this task is presented herein. 

4. The status and results of Task 1 were presented at the December 
program review. This effort on this task is continuing. 



I. INTRODUCTION 


This quarterly progress report describes and presents the results 
of work performed by the Martin Marietta Corporation under Contract 
NAS8-25619 during the October through December^ 1971, reporting period. 

The effort, which was initiated In May, 1971, as an extension to the 
basic contract. Is comprised of three tasks. Task I consists of updating 
the results of the basic study by reviewing and evaluating the results of 
certain related studies In the area of propulsion system checkout and 
monitoring. Task II consists of the preparation of a document, "Guide- 
lines for Incorporation of the Onboard Checkout and Monitoring Function 
for The Space Shuttle." These guidelines will be used by NASA and the 
Space Shuttle contractors to Incorporate the onboard checkout and monitor- 
ing function Into the basic design of the propulsion systems and associated 
interfacing systems. Task III consists of the evaluation of the propulsion 
checkout and monitoring requirements of an expendable booster for Space 
Shuttle. Figure I-l shows the schedule milestones of the study. 

The subsequent chapters of this report summarize the status of the 
tasks and present the documented results of the work accomplished during 
the reporting period. This documentation includes a draft of that por- 
tion of the Guidelines Doctjment that has been reviewed by NASA. The doc- 
umentation also Includes the Task III configuration definition and systems 
analysis results. 



Go-Ahead 



Figure I-l Project Schedule 
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II. STATUS AND RESULTS - TASK I 

The effort on Task I during this reporting period has been com- 
prised of: The resolution of open items in the last quarterly progres 

report; a partial review of the final report of Contract NAS9-10960; 
the acquisition of data on bearing incipient failure detectors from 
SKF^ and General Electric^; a discussioo of leakage detection by ultra 
sonic techniques with Pearce Associates'^; and the presentation of a 
summary of all data collected and evaluated to date at the Midterm 
Review held in mid-December at NASA-MFSC. 

Table II-l summarizes the status of this task. The asterisks 
identify the studies on which data summaries were presented at the 
Midterm Progress review. 


1. SKF Industries, Inc., Engineering and Research Center, 1100 First 
Avenue, King of Prussia, Pa. 19406. (Mr. Paul Howard). 

2. General Electric Co., Aerospace Instruments and Control Systems 
Dept., P. 0. Box 5000, Binghamton, N. Y. 13902. (Mr. N. Gula) . 

3. J. L. Pearce & Associates, Dynamatec Corp., 101 N. Atlantic Ave., 
Cocoa Beach, Florida 32931. (Mr. J. C. Janus). 



STUDY CONTRACTOR STATUS 


TABLE II-l 

TASK I STATUS SUMMARY 
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NAS 10- 7258 MMC Reviewed basic study. Tracking follow-on. 
NASlO-7291 Dynamatec Reviewed Phases I & II. Tracking Phase III 
NASlO-7145 GE Reviewed basic study. Tracking follow-on. 
NAS9- 11330 IMSC Review In progress. 
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III. STATUS AND RESULTS - TASK II 


During the month of October the preliminary draft of Sections 1.0 
and 3.1 were reviewed with NASA. The comments and recommendations were 
subsequently Incorporated and presented in the October Progress Report. 

The remainder of Section 3.0 was then drafted and submitted to NASA. 
Sections 1.0 and 3.0 were reviewed in their entirety ct the Midterm Re- 
view in mid-December. A number of valuable comments and recommendations 
were obtained during that review and subsequently Incorporated for pre- 
sentation herein. We welcome further comments on this material. 

In addition, a portion of Section 5.0 has been drafted for presenta- 
tion at this time. The draft of the balance of the document is in progress. 
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GUIDELINES FOR INCORPORATION OF THE 
ONBOARD CHECKOUT AND MONITORING FUNCTION 
ON THE SPACE SHUTTLE 


1.0 SCOPE 

1.1 Content 

1.2 Applicability 

1.3 Intended Use 

2.0 APPLICABLE DOCUMENTS 

3.0 REQUIREMENTS 

3.1 Performance 

3.1.1 Checkout and Monitoring Functions 

3. 1.1.1 Checkout 

3. 1.1. 1.1 Prestart Checkout 

3. 1.1. 1.1.1 Status Verification 

3. 1.1. 1.1. 2 Redundancy Verification 

3. 1.1. 1.1. 3 Avionics Checks 

3. 1.1. 1.1.4 Functional Testing 

3. 1. 1. 1. 2 j Postflight Checkout 

3. 1.1. 1.3 Maintenance Retest 

3. 1.1. 2 Monitoring 

3. 1.1. 2.1 Fault Detection 

3. 1.1. 2. 2 Fault Isolation 

3. 1.1. 2.3 Trend Analysis 

3. 1.1. 2.4 Data Recording 

3. 1.1. 2.5 Display 

3. 1.1. 3 Control 

3. 1.1.4 Postflight Evaluation 

3.1. 1.4.1 Postflight Data Evaluation 

3. 1.1.4. 2 Postflight Inspection 

3.1.2 Systems Analysis Approach 

3. 1.2.1 Propulsion System Definition 

3. 1.2. 1.1 Functional and Operational Criteria 

3. 1.2. 1.2 Propulsion Hardware Definition 

3. 1.2. 1.3 Control Sequence & Operational Logic 
Diagrams (CSOLD) 
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3.1. 2.2 System Analysis 

3. 1.2. 2.1 Line Replaceable Unit Identification 

3. 1.2. 2. 2 Failure Modes and Effects Analysis 

3. 1.2. 2. 3 Checkout and Monitoring Functional 
Requirements Analysis 

3. 1.2. 2. 3.1 Description of Results 

3. 1.2. 2. 3. 2 Derivation of Results 

3.1. 2.2.4 Measured Parameter and Sensor Selection 

3.2 Checkout and Monitoring Function Implementation 

3.2.1 Elements Related to Checkout and Monitoring 

3. 2. 1.1 Propulsion System Elements 

3. 2. 1.2 Sensors 

3. 2. 1.3 Interfaces 

3. 2. 1.4 Ground Support Equipment (GSE) 

3. 2. 1.5 Data Management and Control (DM&C) Subsystem 

3. 2. 1.5.1 Central Computer Complex (CCC) 

3.2. 1.5. 2 Digital Data Bus 

3. 2. 1.5. 3 Subsystem Interface Unit (SIU) 

3. 2. 1.6 Dedicated Remote Processors 

3. 2. 1.7 Recorders 

3. 2. 1.8 Crew. Controls and Displays 

3.2.2 Allocation of Functional Capabilities 

3. 2.2.1 Capability Requirements and Implementation 
Candidates 

3. 2. 2. 1.1 Data Acquisition 

3. 2. 2. 1.2 Data Processing 

3. 2. 2. 1.3 Electrical Stimuli 

3. 2. 2. 1.4 Data Storage 

3. 2. 2. 1.5 Data Reporting 

3. 2. 2. 2 Capability Allocation Criteria 

3. 2. 2. 2.1 Sensors 

3. 2. 2. 2. 2 Subsystem Interface Units 

3. 2. 2. 2. 3 Remote Processors 

3. 2. 2. 2.4 Recorders 

3. 2. 2. 2. 5 Displays 

3. 2. 2. 2. 6 Data Bus 

3. 2. 2. 2. 7 Central Computer Complex 

3. 2. 2. 2. 8 Ground Support Equipment 



4.0 QUALITY ASSURANCE 


5.0 NOTES 


5.1 Definitions 

5.2 Abbreviations 


5.3 Supplementary Information 
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GUIDELINES FOR INCORPORATION OF THE 
ON-BOARD CHECKOUT AND MONITORING FUNCTION 
ON THE SPACE SHUTTLE 


1.0 SCOPE 

1.1 Content - This document provides guidelines for incorporation 
of the On-board Checkout and Monitoring Function into the designs of the 
Space Shuttle propulsion systems. Hereinafter, the On-board Checkout 
and Monitoring Function is referred to as OCMF, These guidelines con- 
sist of and identify supporting documentation; requirements for formula- 
tion, implementation and integration of OCMF; associated quality assurance 
techniques and requirements; and OCMF terminology and nomenclature. 

1.2 Ap plicability - These guidelines are directly applicable to 
the incorporation of OCMF into the design of Space Shuttle propulsion 
systems and the equipment with which the propulsion systems interface. 

The techniques and general approach as identified herein also are 
generally applicable to OCMF incorporation into the design of other 
Space Shuttle systems. 

1.3 Intended Use - These guidelines shall be used by the National 
Aeronautics and Space Administration and the Space Shuttle contractors 
during the basic design phase of the Space Shuttle program. These 
guidelines shall be used to insure that the OCMF is incorporated into the 
basic design of the propulsion systems and associated interfacing systems. 
The applicable hardware, software and system design criteria documents 
and specifications shall incorporate the requirements of this document. 
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2.0 APPLICABLE DOCUMENTS 

2.1 S pecifications 

2.2 Standards 

2.3 Other Documents 

(These titles are presented at this time for continuity only. The text 
of this section will be derived from Sections 3.0 and 4.0 subsequent to 
their completion.) 
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3.0 RE QUIREMENTS 

This section specifies the approach, constraints and considerations 
that shall be used in the definition and implementation of the OCMF. 

3.1 Performance - This section specifies the functions that the 
OCMF shall perform, and the system analysis that shall be conducted to 
define the checkout and monitoring requirements. 

3.1.1 Checkout and Monitoring Functions - The primary functions 
that comprise the OCMF for the Space Shuttle propulsion system are check- 
out, monitoring, control, and postflight evaluation. 

Checkout shall be performed prior to each functional operation of 
the propulsion system (whether in flight or on the ground), during post- 
flight safing and purging, and during maintenance operations. 

Monitoring shall be performed during all phases of the Shuttle 
mission; that is, during preflight, inflight, postflight safing and purg- 
ing, and maintenance operations. 

Control shall be provided during all mission phases to start, stop, 
or otherwise regulate the operation of the propulsion systems. 

Postflight evaluation shall be conducted during the interval between 
landing and maintenance operations. It is con^)rised of postflight 
evaluation of inflight data, inspections of the flight hardware, and 
checkout during postflight safing and purging. 

3. 1.1.1 Checkout - Checkout of the propulsion system consists of 
verifying its status, redundancy and operability. Checkout shall be 
performed prior to each start of propulsion system functional operation, 
during postflight safing and purging, and during maintenance operations. 
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3.1. 1.1.1 Prestart Checkout - Prestart checkout shall verify that 
the propulsion system will meet its functional requirements during its 
next operation. The prestart checkout function is applicable to all 
phases (ground and flight) of the Space Shuttle mission that require 
propulsion system functional operations. The OCMF shall have the capa- 
bility of performing verification of correct prestart status, avionics 
checks, redundancy verification and functional testing. 

3. 1.1. 1.1.1 Status Verification - Prior to each operation of the 
propulsion system, the OCMF shall verify that the parameters associated 
with the elements of the propulsion system are within specified limits to 
ensure successful initiation of systems operation. Examples of such 
parameters include tank gas pressures and valve positions. 

3. 1.1. 1.1. 2 Redundancy Verification - Redundancy verification is 
the process of verifying that all redundant functional elements of the 
propulsion system and the associated (XJMF elements are operable. Com- 
plete redundancy verification shall be performed prior to each f’light. 

For mechanical elements, normal functioning of the redundant elements 
demonstrated in the previous flight, during postflight safing and purging, 
during maintenance retest, and/or during preflight operations shall be 
sufficient for redundancy verification. For the operational Space Shuttle 
vehicle, prestart checkout by functional tests for redundancy verifica- 
tion of mechanical elements shall be conducted only if the redundant 
element was not operationally verified during the operations mentioned 
above. However, capability shall exist in the basic design of the 
mechanical systems and the OCMF for redundancy verification by functional 
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testing. The operability of the redundant paths in electrical and elec- 
tronic elements shall be verified prior to flight, (This does not 
preclude inflight redundancy verification of electrical and electronic 
elements such as by self- checks.) 

3.1. 1.1. 1.3 Avionics Checks - A complete prestart checkout of the 
electronic and electrical subsystems associated with the propulsion 
system and the OCMF shall be performed prior to each functional operation 
of the propulsion system. This checkout shall include such checks as 
verification of electrical power quality, data management subsystem 
self-checks, verification of the electrical elements of the sensors, and 
sequencing. 

3. 1.1. 1.1.4 Functional Testin g - The OCMF and the propulsion system 
shall have the capability for functionally testing the elements of the 
propulsion system prior to flight to verify redundancy and operability. 

The capability to test for internal and external leakage shall be in- 
cluded. 

3.1. 1.1,2 Postflight Checkout - Postflight checkout consists of the 
final assessment of the status and operability of the propulsion system 
before the maintenance cycle. It consists of monitoring the operation 
of the propulsion elements normally operated during the safing and purging 
operations. Verification of redundancy (of elements not used in flight) 
and the lack of performance degradation are the principle objectives of 
this checkout. Proper operation of functional elements during this phase 
shall be sufficient to preclude preflight functional testing of those 
elements to verify operability or redundancy (unless an element has been 
affected by maintenance actions). 



m-10 


3. 1.1. 1.3 Maintenance Retest - The OCMF shall have the capability 
to verify the integrity of interfaces and readiness status of the Line 
Replaceable Units (LRUs) that are functional elements, following their 
installation during maintenance operations. This capability shall in- 
clude verification of functional propulsion elements affected by the 
LRU maintenance. Capability shall be provided to accon^lish the veri- 
fication by performing functional and leak tests. Capability shall also 
be provided to control and monitor individual functional elements in or 
out of normal sequences. Capability for individual coiiqponent test may 
be waived only by formal NASA approval. 

3. 1.1. 2 Monitoring - Monitoring is the OCMF activity of data 
acquisition and processing, and is applicable to all phases of the 

a 

Space Shuttle mission. The monitoring function, in accordance with the 
following guidelines, shall consist of fault detection, fault isolation, 
trend analysis, data recording, and display. The parameters to be 
monitored, and the intervals and frequencies of monitoring, shall be 
derived from the analysis defined in Paragraph 3. 1.2. 2. 

Inflight monitoring shall be accomplished by on-board equipment 
without reliance on a data interface external to the vehicle. 

3. 1.1. 2.1 Fault Detection - The fault detection function shall 
provide data for emergency detection and for redundancy management, and 
for the related crew displays. Fault detection shall be accomplished by 
on-board equipment for all failure modes identified by the Failure Modes 
and Effects Analysis of Paragraph 3. 1.2.2. Exceptions shall be taken 
only with NASA concurrence and shall be doc\unented as such. 

Emergency detection is the detection of any condition requiring 





automatic action to avoid a potentially catastrophic effect, or detection 
of any condition requiring special precautions or emergency procedures 
by the crew. The OCMF shall provide emergency detection for loss or 
impending loss of critical functions and for flight safety parameters 
exceeding safe limits. Emergency detection shall be accomplished within 
a time interval which permits the necessary actions to be taken to pre- 
clude a catastrophic effect of the failure. The emergency detection 
provisions, including the associated caution and warning displays, shall 
comply with the redundancy requirements defined by the Space Shuttle 
program specifications. 

3«1*1«2.2 Fault Isolation - Diagnosis for fault isolation shall 
be accomplished with on-board equipment for the control function of 
redundancy management and for use in maintenance operations. 

Redundancy management is comprised of reacting to the detection of 
a failure, impending failure, or other potential emergency condition 
by activating the appropriate redundant function, path or element. The 
capability for redundancy management shall be provided in the propulsion 
system and associated subsystems, including the capability for fault 
isolation to the lowest level (element, path or function) at which re- 
dundancy is provided. Fault isolation for redundancy management shall 
be accomplished as soon after fault detection as necessary to activate 
the redundant element, path or function before the fault progresses. 

Loss of redundancy shall be reported to the crew. Fault isolation shall 
be accomplished cf or maintenance operations by identifying the faulty 
Line Replaceable Unit (LRU) and recording the data. 
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3. 1.1. 2. 3 Trend Analysis - The parameters to be monitored for trend 
data and the discriminants by which the data shall be evaluated shall be 
as identified by the analysis of Paragraph 3. 1.2. 2. 3. The principle 
purpose of trend analysis shall be to identify progressive deviations or 
degradations in performance while the system is still within safe opera- 
ting limits. The information derived from this short term trend analysis 
shall be used in managing redundancy by using redundant resources when 
trend analysis has predicted an imminent failure, and in support of 
maintenance operations by identifying elements which have an unacceptable 
probability of failure during the next operation or mission. Short 

term trend analysis shall be conducted by on-board equipment. 

Long term trend analysis, such as the compilation of fleet trend 
data, can be performed by ground equipment or by on-board equipment. 

The extent to which each candidate is used shall be determined by con- 
ducting the tradeoff analyses of Paragraph 3. 2. 2. 2. 8. 

3. 1.1. 2. 4 Data Recording - The OCMF shall have the capability for 
processing and recording propulsion system performance data, trend data, 
fault isolation data, and component operating history data. The data 
recording requirements shall be as defined by the ana).ysis of Paragraph 

3. 1.2. 2. 3. The recorded data shall be formatted and identified as to time 
and parameter to allow efficient postflight processing for reduction and 
evaluation. 

3. 1.1. 2. 5 Display - The OCMF shall have the capability for reporting 
information to the crew. The general guideline for inflight display is 
that priority shall be placed on displaying information necessary for 
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crew action or caution and warning. Included in this category are 
notification of the detection or prediction of a fault when corrective 
actions or emergency procedures by the crew are required, and notifica- 
tion of any reduction in level of redundancy. Capability shall be pro- 
vided to display (on a crew request basis) the fault isolation data on 
which automatic redundancy management decisions are made. The capability 
shall also be provided for displaying flight information relating to 
system status and performance, such as operating modes and propellant 
quantities. 

3.1. 1.3 Control - Propulsion system control is an integral part of 
the on-board checkout and monitoring function. Control capability shall 
be provided to initiate, modify, terminate or otherwise regulate the 
operation of the propulsion system during all phases of the Space Shuttle 
mission. Specific control requirements shall be derived from the analyses 
of Section 3.1.2. In general, the propulsion system is controlled by 
stimuli originating in associated subsystems, such as ignition and 
thrust commands originating in the avionics and/or crew subsystems. 

While control signals are generally low level electronic signals at their 
origin, propulsion elements may require high energy stimuli from other 
systems such as the electrical, hydraulic, or pnuematic systems, or from 
ordnance. 

3. 1.1.4 Postflight Evaluation - The OCMF shall support the post- 
flight evaluation activities required for the propulsion system. They 
include postflight data evaluation, postflight inspection, and safing 


and purging 
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3.1. 1.4.1 Postflight Data Evaluation - Postfllght data evaluation 
Is the data processing and analysis activity required to transform flight 
recorded data Into the forms required by the ultimate users. Require- 
ments for postfllght data evaluation Include the processing of Inflight 
fault Isolation and trend data to Identify necessary maintenance actions; 
processing of performance data to establish vehicle and fleet trends; and 
data compilation to accrue operating histories on time and cycle sensitive 
components. 

3. 1.1. 4. 2 Postfllght Inspection - While postfllght Inspection Is 
not a function of the OCMF, It Is essential to the Identification of 
potential maintenance actions on the propulsion system and to the veri- 
fication of the structural integrity of the propulsion system. Postfllght 
inspection includes visual and manual inspections of the flight hardware 
for evidence of anomalies such as hot gas leakage and structural damage 

or degradation. 

To maximize the effectiveness of the ground operations, the postflight 
inspection requirements shall be identified during the design cycles of 
the propulsion system and during the checkout and monitoring requirements 
analyses such that they may be integrated into the designs of the pro- 
pulsion system and into coordinated postflight evaluation procedures. 
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3.1.2 Systems Analysis Approach - The systems analysis approach 
specified herein shall be employed to ensure that the propulsion system 
design is consistent with OCMF concepts, and to define the propulsion 
system's checkout and monitoring requirements. The systems analysis 
shall be comprised of assemblage of propulsion system hardware and 
functional data, analyses of the propulsion systems and elements, and 
the derivation of propulsion parameters for measurement. An iterative . 
process shall be employed whereby the conceptual and preliminary designs 
of the propulsion system shall be refined to accommodate and incorporate 
the checkout and monitoring functions defined in Section 3.1.1, to 
eliminate propulsion system elements that are not amenable to fault 
detection and Isolation with onboard equipment, and to provide an optimized 
complement of measurement parameters. The quality assurance checkpoints 
and documentation requirements of the systems analysis are specified 
in Section 4.0. Figure 3. 1.2-1 Illustrates the systems analysis approach. 

3. 1.2.1 Propulsion System Definition - A thorough definition of 
the propulsion system shall be assembled to provide a base for the systan 
analyses. Requirements for approval and documentation of the propulsion 
system definition are specified in Section 4.0. The propulsion system 
definition shall be changed and documented in accordance with the 
iterative steps in the systems analysis. 

3. 1.2. 1.1 Functional and Operational Criteria - Functional and 
operational criteria shall include the following: 

(a) Program Requirements: specifications, constraints, guidelines, 

concepts and objectives to be adhered to and pursued in the 
formulation of propulsion system and OSMF definition. These 
program requirements shall be supplied by NASA or its designee. 




FIGURE 3. 1.2^1 PROPULSION SYSTEM DEFINITON & ANALYSIS APPROACH 
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(b) Mission Characteristics: For each mission phase (including 

the turnaround cycle) full descriptions including timelines, 
sequences of events, and objectives. The mission characteristics 
shall be provided by NASA or its designee. 

(c) System Operational Requirements: Complete descriptions of the 

propulsion system func tlonal operating requirements on a 
mission phase basis. These descriptions shall include the 
modes of propulsion system operations and associated sequences, 
frequencies, and durations; the Interface requirements of the 
propulsion system with the other vehicle systems; and the 
propulsion system interfaces with the launch facility, propel- 
lant loading system, and ground mechanical and electrical 
support equipment at the launch pad and in the maintenance 
areas. 

3. 1.2. 1.2 Propulsion Hardware Definition - Hardware definition 
shall consist of propulsion system schematics to the component level, 
system configuration drawings, and component definitions. The system 
configuration drawings shall define propulsion system interfaces with 
other subsystems, and shall show the physical arrangement and locations 
of the propulsion hardware within the vehicle. The component definitions 
shall contain operating characteristics and criteria in sufficient detail 
to permit the conduct of the component analysis. For example, the defini- 
tion of a solenoid valve shall include the following characteristics for 
the final iteration of the propulsion system analysis: 
weight, volume and envelope 
operating and/or service fluids 
operating, proof and burst pressure 
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opening and closing response times under specified conditions 

performance margins 

operating and service life ratings 

environmental ratings 

contamination control requirements 

mechanical Interface requirements 

electrical interface requirements 

special considerations unique to the design, construction, 
operation and service of the component 

3. 1.2. 1.3 Control Sequence and Operational Logic Diagrams (CSOLD) - 
Control sequence and operational logic diagrams shall show the detailed 
sequences and conditions of operation of the propulsion systems. The 
diagrams shall contain entries for each sequential event and each condi- 
tion required for a change of system, subsystem, assembly or component 
state, as well as the conditions necessary for continued operation In the 
same state. The accuracy with which a condition must be known shall be 
Included. 

All interfaces, modes of operations and redundancies shall be 
incorporated into these diagrams. The diagram shall encompass pre- 
start, start, operating, shutdown and post-operation conditions. The 
feedback or Influence of events and conditions on each other, the system 
operation, and interfacing functions shall be indicaced. 

For example, a portion of a simplified CSOLD for the 
operation of an oxygen conditioning subsystem (see Figure 
3. 1.2-3) is illustrated by Figure 3. 1.2-2. For the purposes 
of this example, assume that prestart checkout has been suc- 
cessfully completed, the subsystem isolation valves (VI, V5, 
and V7) have been opened and verified, that under normal 
conditions only one section of the subsystem operates at 


I IM9 



Figure 3J.2-2 Simplified Control Sequence and Operational Logic Diagram 
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Figure 3, 1.2-3 Oxygen Conditioning Subsystem 
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any one time, and that the sections of the subsystems 
are operated In progression so that each section can be 
expected to be operated during each flight. 

The first block In Figure 3. 1.2-2 represents the logic 
that enables the subsystem, selects the next section to be 
operated, conducts readiness checks, and opens the Isolation 
valves. The start and stop times of subsystem operation are 
controlled by the pressure In Tl. The block labeled Subsystem 
A Indicates that the value of the pressure In Tl may be 
required for other reasons, such as the fault Isolation of 
another subsystem. The value that would appear In the time 
delay block Is determined by the frequency at which the pressure 
must be measured (sample rate). The operation of the selected 
section Is Initiated by opening the appropriate pump suction 
valve (V8 for SI) . The verification of valve response may 
require the evaluation of parameters such as position, position 
versus time, line pressure, temperature, or solenoid current 
and/or voltage traces. The line labeled NO from the V8 Response 
question block (and the other unterminated NO lines) lead to 
fault isolation, subsystem or section shutdown and redundancy 
management sequences. 

The start sequence is continued by commanding the gas generator 
oxygen feed valve (V2) open and verifying it. The remainder of 
the start sequence, represented by a single block, would consist 
of opening the fuel feed valve (V6) and igniting the gas generator 
In the proper sequence. The timing and other conditions required 
to complete the start sequence shall be Identified. 
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To fulfill the requirements of the monitoring function, 
a number of parameters may be monitored daring steady-state 
operation, such as gas generator chamber pressure and temperature; 
turbopump speed and discharge pressure; power train lube level, 
pressure and temperature; power train vibration level, power 
train bearing temperature, etc. Some or all of these same 
parameters may be monitored at the same or different sample 
rates, at other times (during start, shutdown, etc.) for dif- 
ferent reasons, and using the same or different discriminants 
to evaluate them. 

The steady-state operation and monitoring would continue 
until either the pressure in Tl attained the specified level 
or until a fault was detected at which time the appropriate 
shutdown, fault isolation and redundancy management sequence 
would be executed. 

Fault isolation sequences shall be based on the LRU 
identifications (paragraph 3. 1.2. 2.1) and the level of redundancy 
of the system. 

3. 1.2. 2 System Analysis - The checkout and monitoring requirements 
for the propulsion systems shall be defined by the system analyses 
contained herein. The analyses of the propulsion systems shall be 
conducted by the propulsion design personnel in a coordinated effort 
with all other affected personnel. These analyses include line replace- 
able unit identification, failure modes and effects analysis, checkout 
and montiroing functional requirements analysis, and measured parameter 
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and sensor Identification. In addition to the identification of 
the required measured parameters and their associated sensors, the 
system analysis shall define data processing requirements, recording 
and display requirements, stimuli requirements, functional and leak 
test requirements, inspection requirements, and requirements for 
ground support equipment associated with checkout and monitoring. 

3. 1.2. 2.1 Line Replaceable Unit Identification - Propulsion line 
replaceable units (LRUs) shall be identified. An LRU is defined as a 
component, group of components, assembly or subsystem that can be 
removed, replaced, and retested in the maintenance area by competent 
mechanics within the constraints of the Space Shuttle turnaround cycle 
timeline. All LRUs, except those that perform no function other than 
providing structural integrity, must be capable of being fault Isolated. 
Exceptions shall be made only with formal NASA approval. 

The identification of the LRUs shall be determined through tradeoff 
studies. Selection considerations shall include accessibility, weight, 
volume, complexity of the structural, mechanical and electrical attach- 
ments, post-installation retest requirements, and fault isolation 
capability. Examples of LRU candidates are the gas generator or a valve 
package (VI, V2) of Figure 3. 1.2-3. 

3. 1.2. 2. 2 Failure Modes and Effects Analysis - Failure modes and 
effects analysis (FMEA) shall be conducted to identify limitations in the 
propulsion system design (such as propulsion elements that are not amen- 
able to fault detection with onboard equipment or require system break- 
in for checkout), to establish candidate parameters for fault detection 
and fault isolation, and to provide a basis for determining caution and 
warning display requirements. The basis for the FMEA shall be MSFC 
Drawing No. 85M03885, "Guidelines for Performing Failure Mode, Effects, 
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and Criticality Analysis (FMECA) on the Space Shuttle", except 
that the criticality analysis defined therein is not required for 
propulsion system analysis for the OCMF. The FMEA tabulation format, 
as presented in the referenced drawing, is shown in Figure 3. 1.2-4, 

The FMEA shall be Iterated each time that the propulsion system 
design is modified during the system analysis and OCMF implementation 
cycles. 

3. 1.2. 2. 3 Checkout and Monitoring Functional Requirements Analysis 
This analysis, as outlined in Figure 3. 1.2-1, shall derive the imple- 
mentation requirements for the OCMF. The approach shall consist of 
evaluating the Propulsion System Definition (Paragraph 3. 1.2.1), the 
LRU Identifications (Paragraph 3. 1.2. 2.1), and the FMEAs (Paragraph 
3. 1.2. 2. 2) to satisfy the checkout, monitoring, postflight evaluation, 
and control function requirements of the propulsion systems. The 
result of this analysis shall be the identification of requirements 
for display, recording, trend analysis, functional and leakage 
testing, data acquisition, stimuli, data processing, simulation, and 
related ground support equipment, 

3. 1.2. 2. 3.1 Description of Results 

(a) Display Requirements - System status and hazard warning are 
the principal display requirements. The listing of display 
requirements shall Identify: (1) any crew action required 

by the display condition; (2) the recommended type of display; 
(3) the mission time period or event for which the display is 
required; and (4) the required display redundancy based on the 
criticality of the condition being displayed. The derivation 
of the display requirements shall be accomplished per the 
guidelines of Paragraph 3. 1.2. 2. 3. 2, 



nt ma 

$B»$T$ra FAILURE MODE AND EFFECTS ANALYSIS 

FMcnoui lY . 


III-25 



Figure 3, 1.2-4 FMEA Tabulation Format 
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(b) Recording Requirements - System status, system performance, 

fault Isolation, and operating history data are the principal 
recording requirements. The Identification of the data 
recording requirements shall specify: (1) the ultimate use 

of the recorded data; (2) the processing required (if any) 
prior to data recording; (3) the time of mission and period 
during which the indicated recording is required; (4) the 
peak rate at which the data must be recorded; and (5) the 
period for which recorded data must be retained. Recording 
requirements shall be derived per the guidelines of Paragraph 
3. 1.2. 2.3.2. 

(c) Functional and Leakage Testing Requirements - The checkout 
and monitoring functional requirements associated with 
functional and leakage testing shall be included in the 
definition of the data acquisition, stimuli, recording, display, 
data processing, simulation and GSE requirements defined for 
maintenance retest and ground checkout activities. 

(d) Data Acquisition Requirements - Data acquisition requirements 
shall be derived in accordance with the analyses of Paragraph 
3. 1.2. 2.3.2. The recommended format of the tabulation of these 
requirements and an example (Tl pressure in Figure 3. 1.2-3) 

of the information to be entered therein is illustrated by 
Figure 3. 1.2-5. 

The initial tabulation shall be made without regard to whether a 
parameter shall be obtained by direct measurement (measured parameter) 
or whether it must be derived (derived parameter) indirectly from one 
or more measured parameters. 
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FIGURE 11.2-5 FORMAT FOR DATA ACQUISITION REQUIREMENTS TABULATION 
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The data acqulsltlpn tabulation is a composite listing 
that defines the relationship between a parameter and a propulsion 
element, the basic discriminant for evaluating acquired data, the 
rationale for acquiring data, and the interval during which the 
data is of significance. 

(e) Stimuli Requirements - Stimuli requirements are those 
necessary to satisfy the control function of the propul- 
sion system elements. The specification of electrical 
requirements shall include signal identification, 
associated propulsion element, and applicable signal 
characteristics such as type, level, frequency, pulse 
width, repetition rate, duration, accuracy, time and 
conditions for application, maximum source impedance, 
minimum load impedance, and remarks that identify those 
conditions or characteristics not otherwise covered. 

Propulsion system power requirements and sensor reference 
voltages are not included in these requirements. Power 
requirements shall be identified in the appropriate inter- 
face control documents, and sensor reference voltage require- 
ments shall be identified from the sensor definitions of 
Section 3.2. 

The specification of mechanical stimuli shall include all 

all applicable characteristics such as force, torque, pressure, 

etc. 

(f) Data Processing Requirements - Required algorithms, computations, 
comparisons, or other data processing techniques shall be 
identified for each usage of each identified propulsion system 
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measured parameter, and for the execution of propulsion 
system control. These specifications shall Include the 
frequency at which the processing is required and any 
limitations that may be imposed on processing time. 

Data processing requirements shall be derived per the 
guidelines of Paragraphs 3. 1.2. 2. 3. 2. and 3. 1.2. 2. 4. 

(g) Related GSE Requirements - Ground support equipment 
related to the checkout and monitoring function Includes 
those items necessary to support the ground activities 

of postflight checkout and evaluation, maintenance retest, 
and prestart checkout. The identification of these GSE 
requirements shall be a result of the analysis approach 
of Paragraph 3. 1.2. 2. 3. 2. 

(h) Simulation Requirements - The validation of onboard computer 
programs and control sequences during preflight checkout requires 
the simulation of a number of propulsion parameters and 
conditions such as the simulation of engine thrust build-up, 
tank pressures, and so forth. Simulation requirements shall 

be identified in conjunction with the derivation of the pre- 
start checkout requirements. 

(i) Inspection Requirements - Inspection requirements shall 
include the definitions of the propulsion system design 
requirements. Inspection procedures, and related support 
equipment necessary to conduct postflight inspection. 
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3. 1,2. 2. 3, 2 Derivation of Results - The results described in 
Paragraph 3. 1.2. 2. 3.1 shall be derived in accordance with the analytical 
approach presented herein. 

Checkout, monitoring, control and postf light evaluation are generally 
dependent functions. In most cases the requirements or capabilities 
necessary to perform those functions are most easily and effectively 
defined simultaneously. For example, the oxygen accumulator pressure 
in Figure 3. 1.2-3 is monitored to control the operation of the oxygen 
conditioning subsystem in addition to being used for fault detection, 
fault Isolation, and hazard warning display. Therefore, at the time 
that accumulator pressure is listed in the data acquisition tabulation, 
the corresponding data processing for fault detection, subsystem control, 
and display should be defined. 

Dara acquisition requirements shall be Identified from two general 
sources. First, data acquisition parameters for fault detection, 
emergency detection and/or hazard warning display shall be identified 
for each recommended failure detection method identified from the results 
of the FMEA. The discriminants relating candidate parameters to specific 
failure modes shall be identified for each failure detection method. 

These discriminants are the basid source from which the corresponding 
data processing requirements shall be derived. Discriminants can be 
determined either by using the results (signatures) of extensive testing 
of acceptable and failed samples (including trend analysis) or by the 
understanding of the specific failure mechanisms decermined by analytical 
techniques. 
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Second, data acquisition requirements for status and redundancy 

verification, functional and leakage testing, fault isolation, trend 

analysis, data recording and display, simulation, and control shall 

be derived from a phase-by-phase mission analysis using; 

Control Sequence and Operational Logic Diagrams (Para 3. 1.2.1) 

Propulsion System Hardware Definitions (Para 3. 1.2.1) 

Propulsion System Functional and Operational 

Criteria (Para 3. 1.2.1) 

Checkout and Monitoring Function Definitions (Para 3.1.1) 

LRU Identifications (Para 3. 1.2, 2) 

Associated display, recording, data processing, ground support 
equipment and stimuli shall be identified concurrently with the 
derivation of the data acquisition requirements. 

The tabulation of candidate data acquisition parameters shall be 
optimized through the process defined in Paragraph 3w 1.2. 2. 4. (The 
optimization consists of measured parameter and sensor selection, 
and may include the iteration of the propulsion system design to add 
to or modify the propulsion hardware or modify operating sequences for 
the purpose of implementing the OCMF.) The tabulation shall include 
operational conditions such as crew control positions, mission elapsed 
time, burn time, or any other condition(s) that must be sensed to 
execute the checkout, control, and monitoring functions. 

The following paragraphs and figures illustrate the derivation of 
the checkout and monitoring requirements on an individual function 
basis. 

(a) Pres tart Checkout - The prestart checkout function is 
defined in Paragraph 3. 1.1. 1.1. 
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The matrix shown in Figure 3. 1.2-6 shall be used as a 
guideline to derive the OCMF capabilities required for 
the prestart checkout function. The analyses indicated 
by this matrix shall be performed on a step-by-step 
basis for each mission phase in which prestart checkout 
is applicable. 

The primary rows identify the requirements associated with 
the prestart checkout function (status verification, 
redundancy verification, etc.) and the columns identify the 
checkout and monitoring capabilities necessary to satisfy 
those requirements. The secondary rows (data source column) 
identify the source material that must be analyzed to make 
this derivation. Notes providing supplementary information 
and definitions of the data source code acronyms are pro- 
vided at the bottom of the figure. 

The use of the matrix is illustrated below using the subsystem 
of Figure 3. 1.2-3 as an example. The purpose of the examples 
in the following material is to demonstrate the analysis 
techniques and to create an awareness of the type of informa- 
tion to look for and consider. The examples should not be 
construed as conclusions or recommended solutions to specific 
requirements. 

The X in the data acquisition column for status verification 
indicates that an examination of the control sequence and 
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NOTES; 
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operational logic diagrams and the propulsion hardware 
definitions (schematics in this case) are necessary to 
derive the parameters needed to verify subsystem status 
is within specified limits to initiate operation. The 
parameters in this case would be the positions of the six 
solenoid valves (closed), the pressures and temperatures 
of the GO^) GH^, and LO 2 supplies, gas generator igniter 
supply voltage (less than x) , and possibly igniter current 
(less than w) and pump discharge pressure (y ^ 2 ) or 
temperature. 

The X under data processing for the parameters identified 
above would be derived from the measured parameter selection 
process in which a determination of whether a desired para- 
meter can and should be measured directly or can and should 
be derived from one or more measured parameters. Considera- 
tions that influence this determination are whether or not 
it is possible to directly measure the desired parameter and 
the fact that the desired information may be available from 
alternate parameters that must be measured for other reasons. 
Another driving factor in this determination is the objective 
to define the most cost effective system that will satisfy 
the requirements. Examples in the subsystem under consideration 
are the positions of the pump suction valves (V7, V8) . Assume 
that all that is required to be known is for all reasons that 
the valves are either closed or sufficiently open to allow an 
adequate flow of LO 2 to the pump. A number of candidates are 
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available for consideration either individually or in 
combinations: (1) Discrete position indicators; in this 

case the data processing is at a minimum since the trans- 
ducer evaluates position directly and provides a go/no-go 
indication. This option would be most attractive if soft- 
ware design and/or computer speed or memory size were the 
principle cost drivers and the transducers were available, 

(2) Solenoid current signatures and pump inlet pressure 
and/or temperature where the inlet parameters were required 
for another purpose. The data processing for this case 
would consist of analyzing the current signatures with the 
appropriate discriminants (rate, level, rise time) and the 
inlet conditions. This option would have appeal if suitable 
position indicators were unavailable and development costs 
were high, or were not cost effective on the basis of con- 
siderations such as weight, or were not capable of being 
fault isolated. (3) Ultrasonic contact sensors may be 
required to detect internal or external leakage. They may 
be used in conjunction with solenoid current signatures or 
with pump inlet parameters. As in example (2) above, the 
data processing would entail the analysis of signatures and 
and the evaluation of inlet parameters. The selection 
rationale would be similar to example (2). 

Note 1 indicates that redundancy verification is required 
during prestart checkout prior to flight (not in flight). 
Paragraph 3. 1,1.1. 1,2 further indicates that normal functioning 
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of redundant mechanical elements demonstrated during 
the previous flight, postflight safing and purging, 
maintenance retest, and/or during preflight operations 
shall be sufficient for redundancy verification. Assume 
that only sections 2 and 3 of the subsystem in Figure 
3, 1.2-3 had been operated during the previous flight. 

Then the operability of section 1 would require verifi- 
cation on the ground before the next flight. It may be 
verified through normal operation if that subsystem is 
normally started on the ground and section 1 is the next 
sequential section to be operated, or it may be verified 
by functional and leakage testing. (Capability shall be 
provided for functional and leakage testing in any case) . 
Whether or not the section had operated on the previous 
flight the solenoid valves would probably have been 
functionally operated during the postflight safing and 
purging cycle. Therefore redundancy verification may be 
limited to the verification of each check valve, the 
ignition circuitry, the turbopump assembly, and the electrical 
elements of the instrumentation. The verification of the 
operability of the check valves may require the addition 
of a pressure port between the valves to facilitate check- 
out, In this case the propulsion system analysis would be 
iterated to include the new component as it would to include 
any modifications to the basic design to facilitate functional 
testing of the turbopump assembly. 



The X's under data acquisition and data processing for 
redundancy verification have the same meaning as they do 
for status verification. The Xs under recording and 
display for redundancy verification indicate that the 

recording and display capabilities for redundancy status 

0 

shall be identified in accordance with the program require- 
ments and the checkout and monitoring function definitions 
(Section 3.1.1). For example, the loss of redundancy shall 
be displayed to the crew and recorded for maintenance 
operations in the form of faulty LRU identification. 

The remainder of the matrix shall be used in a similar fashion. 
The derivation and implementation of the propulsion system 
checkout and monitoring requirements is dependent on a com- 
prehensive understanding of the data source material, a 
systematic and thorough system analysis, and a coordinated 
effort among personnel of a variety of disciplines from the 
conceptual design through the final design of the propulsion 
and associated systems. 

(b) Postflight Checkout - The postflight checkout function is 
defined in Paragraph 3.1.1ol*2. The capabilities required 
for this function are analogous to those for prestart checkout, 
described in paragraph (a) above, and for monitoring, described 
in paragraph (d) below, and shall be derived in a similar 
manner. An additional item to consider during postf light 
checkout is the potential desirability or requirement to 
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confirm certain faults that were identified inflight. 

This may preclude the possible time consuming removal 
and replacement of acceptable hardware by conducting a 
relatively short checkout sequence. Or, ground fault 
isolation may be required for certain faults that for 
some reason were unable to be isolated to an LRU level 
inflight (such as an open electrical circuit). 

(c) Maintenance Retest - The maintenance retest function is 
defined in Paragraph 3. 1.1.4. 

The checkout and monitoring capabilities required for the 
verification of the leakage integrity of interfaces and 
status of replaced propulsion system LRUs shall be derived 
using the same approach and from the same sources as defined 
for the prestart checkout and monitoring functions. 

The processing requirements for maintenance retest shall 
include the identification of the processing necessary to 
update the operating history records that are used to fore- 
cast scheduled maintenance activities and to establish 
functional testing requirements. 

Simulation requirements requisite to LRU status verification 
shall be derived from the control sequence and operational 
logic diagrams. For example, the status verification of a 
replaced LRU in the subsystem of Figure 3. 1.2-3 may require 
the simulation of the build-up and decay of gas generator 
chamber pressure or the simulation of pump inlet temperatures. 


etc 
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Ground support equipment requirements associated with 
the verification of the leakage integrity of the inter- 
faces and status of replaced LRUs shall be identified by 
this analysis. 

(d) Monitoring - The monitoring function is defined in Paragraph 

3. 1.1. 2. 


The matrix shown in Figure 3. 1.2-7 shall be used as a guide- 
line to derive the OCMF capabilities required for the monitoring 
function. The analyses indicated by this matrix shall be 
performed on a step-by-step basis of every mission phase. 

The format and use of this matrix is analogous to that defined 
for the Prestart Checkout Function Requirements Matrix of 
Figure 3. 1.2-6. 

(e) Control - Stimuli requirements and data processing requirements 
shall be derived to satisfy the propulsion system control 
function of the propulsion system. Stimuli requirements are 
primarily derived from the propulsion component definitions 
described in Paragraph 3. 1.2. 1.2 while the data processing 
requirements are primarily derived from the control sequence 
and operational logic diagrams. The data processing require- 
ments shall include the Identification of parameter discriminants 
on which the control sequences are based and the dependence 
on such variables as mission elapsed time, operating mode, 
crew control positions, etc. 




1. Dependent on operating history of last 
flight and on the maintenance retest 
activities. 

FIGURE 3. 1.2-7 
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(f) Post flight Evaluation - The postfllght evaluation function 
Is defined In Paragraph 3. 1.1.4. The onboard processing 
capability that shall be provided for postfllght data 
evaluation shall be defined in conjunction with the defini- 
tion of the onboard recording capabilities for fault isola- 
tion data, performance data, trend data, and operating history 
data. The processing capability shall be compatible with the 
selected recording techniques and the requirements of the 
data users. Related onboard control and display requirements, 
ground interfaces and ground support equipment shall be iden- 
tified from the resultant processing implementation definitions 
and the data user requirements. 

While postfllght inspection is not a function of the OCMF, 
the related propulsion system, design requirements, inspection 
procedures, and support equipment shall be identified in 
conjunction with the propulsion system analysis to achieve 
a fully integrated design and a coordinated postfllght phase. 

3. 1.2. 2. 4 Measured Parameter and Sensor Selection - This process 
shall consist of data acquisition parameter optimization, measurement 
parameter selection and optimization, and candidate sensor selection. 

The data acquisition parameter tabulation described in Paragraph 
3. 1.2. 2. 3.1 shall be optimized by eliminating non-essential parameters 
and eliminating parameters for which the same or better information is 
available from alternate sources. This is not a restriction on the use 
of redundancy either through the use of redundant sensors or by use of 
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alternate parameters. Records shall be maintained to make visible 
the rationale justifying the retention or elimination of parameters. 

The optimized data acquisition tabulation consists of a listing 
of measured parameters and derived parameters. A measured parameter 
list shall be generated by selecting measured parameters for the derived 
parameters and adding them to the measured parameters listed on the 
optimized data acquisition parameter tabulation, A number of candidate 
measured parameters may exist from which a derived parameter may be 
obtained, (For example, volumetric flow rate, time, and propellant 
temperature, i.e,, density, is a set of candidate measured parameters 
for deriving the parameter propellant quantity) , All measured parameters 
and sets of measured parameters which are candidates for deriving the 
required parameter shall be tabulated. The final selection of measured 
parameters for those cases where alternates exist shall be made in con- 
junction with the implementation tradeoffs and selections of Section 3.2. 

(A driving factor in this selection is the relative cost effectiveness 
of the available sensor candidates and the other capabilities associated 
with a particular implementation candidate). 

The total list of measured parameters shall then be subjected to an 
optimization process. This process shall eliminate non-essential measured 
parameters and shall eliminate those entries for which better information 
is available and has been identified. 

Candidate sensors shall be identified for each entry of the measured 
parameter tabulation. Final sensor selection shall be based on availability 
and the implementation criteria described in Section 3*2. In a case where 
a candidate sensor is not: available, an iteration of the measured parameter 
tabulation is required. If alternate measured parameters cannot be 
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identified, the baseline propulsion system shall be evaluated to 
determine whether or not the sensor requirement in question can 
be eliminated by propulsion redesign. If propulsion redesign is 
a viable option, then all of the foregoing analyses of this section 
shall be included in the iteration cycle. If propulsion redesign is 
not a viable option, then a sensor technology requirement shall be 
identified. 

Fundamental data processing requirements shall be identified 
for each measured parameter. These requirements shall identify the 
discriminants by which each usage of each measured parameter shall 
be evaluated during the time of its significance; the frequency at 
which the processing for each case is required; and the restrictions 
on processing time for each case. The allocation of processing capa- 
bility and its implementation shall be per the guidelines of Section 
3.2. 
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3.2 Checkout and Monitoring Function Implementation - The guide- 
lines delineated In Paragraph 3.2.2 shall be used to Incorporate the 
propulsion checkout and monitoring function requirements Into the Imple- 
mentation criteria of those onboard and ground equipment elements (defined 
In Paragraph 3.2.1) that perform or contribute to propulsion checkout, 
monitoring and control . 

An Integrated approach between the propulsion and avionics disci- 
plines shall be followed to achieve the optimum implementation of the 
propulsion checkout and monitoring requirements. A coordinated effort 
shall be conducted to integrate the selected sensors into the propulsion 
system design; minimize unique propulsion stimuli and excitation require- 
ments; minimize unique specifications that result in special sensors, 
measurement techniques, displays, crew operations, etc.; select measure- 
ment parameters and techniques that best satisfy the requirements; and 
resolve situations where the requirements of the baseline propulsion 
system are not amenable to available checkout and monitoring techniques. 

If propulsion system configuration changes are necessary to achieve the 
objectives of this effort, then the analyses of Section 3.1 and this 
section shall be Iterated for the affected hardware. 

3.2.1 Elements Related to Checkout and Monitoring - The propulsion 
checkout and monitoring function requirements shall be Incorporated 
Into the propulsion system design and Into the Implementation criteria 
of the propulsion system sensors, thp data management and control (DM&C) 
subsystem, the crew controls and displays. Interfacing systems such as 
the hydraulic, pneumatic, and electrical systems, and the related 
ground support equipment (GSE). 
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3. 2. 1.1 Propulsion System Elements - Propulsion system element 
additions and/or modifications shall be made as required to make the 
system amenable to checkout and monitoring. Examples of such configuration 
changes include adding a bleed port downstream of a check valve to verify 
check valve operation; changing a bearing type to one for which failure 
detection methods can be implemented; or relocating sensor installations 

to ensure that the selected location is satisfactory for obtaining the 
desired Information. The propulsion system shall be continually 
evaluated during the derivation and implementation of the checkout and 
monitoring requirements to ensure that its design minimizes the checkout 
and monitoring requirements, and is completely compatible with the 
Implementation of those requirements. 

3.2. 1.2 Sensors - Sensors respond to the measurement parameters 
of the propulsion subsystems and of the propulsion dedicated controls 
and provide outputs in a usable form to remote processors, or to the 
subsystem interface units of the DH&C subsystem, or directly to the 
vehicle central computes complex via the vehicle data bus. Basic 
identification of candidate sensors, including type, range, allowable 
system error, and response, are made for the measurement parameters 
identified by the analyses of Section 3.1. Generation of final sensor 
specifications shall be made in conjtinction with the allocation of 
functional capabilities to the DM&C subsystem elements in accordance 
with the guidelines of Paragraph 3.2.2. 
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3. 2. 1.3 Interfaces - The Implementation of the checkout and 
monitoring function for the propulsion system shall Include the con> 
slderatlon and definition of Interfaces with other onboard systems 
that involve propulsion checkout or control, such as the electrical 
and hydraulic systems. 

3. 2. 1.4 Ground Support Equipment (GSE) - The extent to which the 
propulsion system checkout and monitoring function Is Implemented by 
the use of ground support equipment shall be determined using the 
criteria and considerations Identified In Paragraph 3.2.2. 

3. 2. 1.5 Data Management and Control (DM&C) Subsystem - The 
elements and configuration of the DM6cC subsystem shown by bold blocks 
In Figure 3. 2.1-1 are employed by this document to Illustrate the 
relation of the DM&C subsystem to the pertinent vehicle and support 
equipment elements. The degree of applicability of this configuration 
or others is dependent on final criteria and requirements defined for 
the overall avionics system. 

3. 2. 1.5.1 Central Computer Complex (CCC) - The central computer 
complex provides data processing capability for the Space Shuttle vehicle. 
The degree to which the CCC shall provide processing capability for 
propulsion system control, data evaluation, display, recording, functional 
testing and trend analysis shall be determined using the requirements 
of Section 3.1 as criteria, and the guidelines of Paragraph 3.2.2. The 
CCC shall store the propulsion system flight programs that are not stored 
In propulsion dedicated processors. It may also be used to store propulsion 
system data that Is required to be retrievable during flight. 
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Figure 3.2.1>1 Elements Related to Propulsion System 
Checkout and Monitoring 
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3. 2. 1.5. 2 Digital Data Bus - The vehicle data bus system provides 
the data communication link between the central computer complex and 
other DM6eC subsystem units. The Implementation of the digital data 
bus (or alternate data transportation means) shall accommodate the 
propulsion system requirements and shall be compatible with the allocation 
of capabilities as derived from Paragraph 3.2.2. 

3. 2. 1.5. 3 Subsystem Interface Unit (SIU) - SIUs form the inter- 
faces between the digital data bus and the elements of the user sub- 
systems, and between the digital data bus and remote units of the DM&C 
subsystem. The general functions of an SIU related to propulsion sub- 
systems are control and data acquisition. For the configuration shown 
in Figure 3. 2. 1-1, these functions include capabilities to receive and 
decode digital data bus transmissions, generate and apply electrical 
stimuli to selected points of propulsion subsystems for control, 
acquire data from selected points of propulsion subsystems, and condition 
subsystem data as required to transmit intelligible responses to the CCC. 
Electrical power conditioning and distribution for propulsion system 
control reference voltages may also be implemented by SIUs. 

The extent to which SIUs shall perform data processing on propulsion 
systems data, and the extent to which SIUs shall be required to 
condition propulsion system data shall be determined through trade-off 
analyses. Paragraph 3.2.2 contains criteria that shall be used as a guide 
in defining the allocation of capabilities to SIUs and in defining the 
number and types of SIUs. 
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In addition to the capabilities that an SIU may possess to implement 
propulsion system requirements, it may possess capabilities required by 
other user systems or by the DM&C subsystem such as transmission error 
detection and protection, electrical power conditioning and distribution 
for internal use, electrical power control, and self-checking. The 
requirements for these capabilities shall be derived from the applicable 
program and subsystem requirements. 

3. 2. 1.6 Dedicated Remote Processors - Dedicated remote processors 
can be employed to perform the detailed checkout, monitoring, and control 
functions of certain major subsystems of the Space Shuttle, such as the 
main and airbreathing engines. The communication between remote proces- 
sors and the CCC is limited to high level commands such as engine start, 
thrust level, and engine shutdown, and responses such as self-check 
status, malfunction detection data, and performance data to be recorded. 

The allocation of capabilities to the remoth processors and their associ- 
ated SlUs and sensors shall Incorporate the criteria factors of Paragraph 
3.2.2. 

3. 2. 1.7 Recorders - Recording capability can be in the form of 
vehicle data storage devices, system or subsystem dedicated recorders, 
and/or CCC memory. Dedicated recorders can be used to accommodate 
subsystems that require recording of large quantities of performance data 
for postflight analysis. Similar data from other subsystems may be 
recorded on the vehicle data storage devices. Data that must be retrievable 
during flight, such as system status, shall be recorded in the CCC memory, 
or in the vehicle data recorder if it has inflight data retrieval 
capability. 
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3. 2. 1.8 Crew Controls and Displays - Crew controls for the pro- 
pulsion systems provide for manual Inputs such as thrust level selection 
for the airbreathing engines, manual control of the attitude control and 
maneuvering thrusters, and manual override capabilities as required. 

Crew displays of propulsion system data provide Information to the 
crew relating to propulsion system status, hazard warnings and such 
other data as may be required to assist the crew In determining requisite 
actions. Visual data displays may be augmented by audio or visual 
alarms . 

3.2.2 Allocation of Functional Capabilities - The functional 
capabilities that are required to perform the checkout and monitoring 
function for the Space Shuttle propulsion system are described In 
Section 3.1. The Implementation of those capabilities shall be 
accomplished In accordance with the guidelines of this paragraph. The 
Implementation of the checkout and monitoring function shall consist of 
allocating the required functional capabilities to the various onboard 
and ground elements that are candidates fojJ incorporating those capabilities. 
The allocation of functional capabilities dhall be accomplished through 
tradeoff analyses that include as criteria the requirements derived 
In Section 3.1, the Space Shuttle program requirements, vehicle 
subsystem requirements, and the Implementation guidelines contained 
herein. The Implementation approach Is outlined In Figure 3. 2. 2-1. 

3. 2. 2.1 Capability Requirements and Implementation Candidates - 
Section 3.1 Identified data acquisition, data processing, recording, 
display, and stimuli generation as capabilities that are requisite to 
satisfying the checkout and monitoring function requirements for the 
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propulsion systems. The matrix of Figure 3. 2. 2-2 reduces those 
capabilities to their basic functions and shows the relationship between 
them and the elements that are candidates to Incorporate them. The 
requirements for these basic functions and their derivations are discussed 
In subsequent paragraphs. 

3. 2. 2. 1.1 Data Acquisition - Data acquisition Includes the sensing 
of a propulsion system measurement parameter (whether It Is from a 
sensor or a crew control) and any signal conditioning required to be 
performed to put the data Into a form which Is usable In subsequent 
calculations or comparisons, or for another purpose such as recording 
or display. Calculations or conq>arlsons may be done by a remote unit 
or by the central computers. Implicit In data acquisition Is the 
transportation of data from one element to another, the conversion of 
data from one form to another that transporatlon requires, and any 
switching involved to acquire the desired data. The measurement 
parameter tabulation formulated In Paragraph 3. 1.2. 2. 4 shall be 
included In the criteria to Implement these fundamental functions. The 
translation of the entries of the measurement parameter tabulation 
into Implementation criteria is shown in Table 3. 2. 2-1. For the purposes 
of this dociunent, functions such as data formatting and data validation 
are considered the responsibility of the avionics system and shall not 
be further discussed herein. (Uhile a dedicated remote processor or 
comparable unit may be assigned to the propulsion system. It Is basically 
an avionics unit and Its non- propuls Ion originated characteristics 
would be governed principally by avionics design criteria.) 
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Figure 3.2. 2-2 Capability Requirements Versus 
Implementation Candidates 
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TABLE 3. 2. 2-1 

TRANSLATION OF MEASUREMENT PARAMETER TABULATION 
ENTRIES TO IMPLEMENTATION CRITERIA 


PARAMETER 
(Column 1) 


The parameter type provides 
identification of the basic 
sensor type. 


PROPULSION ELEMENT 
(Column 2) 


The identification of the as- 
sociated propulsion element 
leads to the definition of the 
propulsion component/sensor 
interface 


RANGE AND UNITS 
(Column 3) 


Used in the definition of re- 
quired sensor ranges which 
may affect sensing element type 
the definition of SIU, remote 
rocessor and/or CCC ranee re- 


uirements 


ALLOWABLE ERROR* 
(Column 4) 


Used to define the combined 
accuracy of the sensors, SIUs, 
remote processors, CCCs, and 
displays used to acquire data. 

*A function of data usaee 


RESPONSE RATE 
(Column 5) 


Used to define the required 
sensor response, system sample 
rates and system reaction times, 


SAMPLE RATES 
(Column 6) 


Used to determine hardware speed 
requirement, processing speed and 
magnitude, and vehicle data bus 
rates. Sample rates are used as 
criteria for allocation of pro- 


cessing capability to SIUs versus 


central computers. 


DATA USAGE 
(Column 7) 


Used in the definition of sensor 
type, recording and display 


requirements, basic data proces- 


sing requirements, and vehicle 
data bus requirements . Also 
affects allowable error . 
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TABLE 3. 2. 2-1 

TRANSLATION OF MEASUREMENT PARAMETER TABULATION 
ENTRIES TO IMPLEMENTATION CRITERIA 
(CONTINUED) 


TIME OF ACTIVITY 
(Coltimn 8) 


Used to define the Intervals 
and magnitudes of the peak 
demands on vehicle resources, 
l.e., data bus, processors, 
recorders, displays, and crew. 
Conversely periods of low ac- 
tivity or Inactivity are de- 
fined during which conservation 
of resources may be achieved 
through resource management. 
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3. 2. 2. 1.2 Data Processing - Data processing for the propulsion 
systems is basically comprised of the calculations and/or comparisons 
required to evaluate acquired data (whether done by a remote unit or 
the CCC), the calculations and/or comparisons required to determine an 
appropriate control signal, and the operations requisite to recording 
and displaying propulsion data including data tagging and routing . The 
fundamental data processing requirements for data evaluation shall be 
derived from the data use, allowable error, and response rate entries 
of the measurement parameter tabulation of Paragraph 3. 1.2. 2. 4. 

Similarly the basic processing for propulsion system control shall 

be derived in conjunction with the definition of stimuli requirements. 
Data processing requirements for recording and display shall be derived 
from the recording and display requirements of Section 3.1 and the 
implementation of those requirements per the guidelines of this section. 
Other data processing requirements shall be derived from the simulation 
of sequences, events, and conditions during ground operations. 

3. 2. 2. 1.3 Electrical Stimuli - Control of the propulsion system 
requires the generation and application of external stimuli in addition 
to data acquisition, data processing, display, and crew action. The 
stimuli requirements of the propulsion elements (such as solenoid 
valves) are derived in accordance with Section 3.1. Additional stimuli 
requirements shall be derived from the final sensor specifications. 
Sensor stimuli may include gating commands, self-check commands, and 
calibration reference signals. 
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3. 2. 2. 1.4 Data Storage - The recording of propulsion system 
status, performance data, fault Isolation data, operating history 
data, and the storage of propulsion system algorithms and control 
sequences derived from the analyses of Section 3.1 comprise the data 
storage requirements for the propulsion systems. 

3. 2. 1.5 Data Reporting - The propulsion system parameters and 
conditions for which data reporting (crew displays and alarms) is 
required are identified by the analyses of Section 3.1. 

3. 2. 2. 2 Capability Allocation Criteria - The general criteria 
that shall be considered in the allocation of capabilities to onboard 
and ground equipment are: 

- Space Shuttle program requirements 

- Space Shuttle propulsion system requirements and characteristics 
Space Shuttle avionics requirements 

Space Shuttle environmental requirements 

- Minimization of 

New development requirements 

Ground support requirements 

Unique hardware, software, and procedures 

- Maximization of 

Modularity 

Commonality 

Maintainability 

Reliability 

Hardware and software simplicity 
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Another general consideration for the allocation of functional 
capabilities Is that of ease of subsystem development; that Is, the 
level of development possible at the subsystem level Is largely 
dependent' on the distribution of capabilities among the system elements. 

The specific implementation criteria for allocation of capabilities 
shall be established by conducting the tradeoff analyses defined In 
the following paragraphs. These analyses principally establish 
criteria for the allocation of signal conditioning and data processing 
capabilities among the sensors, subsystem Interface units, remote 
processors and the central computers. 

3. 2. 2. 2.1 Sensors - Basic sensor criteria shall be derived from 
Columns 1, 2, 3, 4, 5, and 7 of the measurement parameter tabulation 
(see Table 3. 2. 2-1). A determination of whether an analog or a discrete 
output is required from the sensing element can be made from that criteria. 
The results of that determination shall be used in the definition of 
the signal conditioning and data processing requirements for the 
parameter under consideration. 

Evaluation of the relative merits of consolidated (SIU or remote 
processor) versus distributed (sensor) signal conditioning shall be 
a primary factor in determining the extent of signal conditioning to 
be incorporated into sensors. The advantages of distributed signal 
conditioning are increased redundancy and the ability to trim a signal 
conditioner to a particular sensor. The advantages of consolidated 
signal conditioning are reductions in the power consumption, weight, 
and size of the signal conditioning equipment. The selection of sensing 
element type shall be done in conjunction with the definition of the 
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signal conditioning equipment required for that sensor and shall include 
consideration of exposure to the propulsion system induced and natural 
environment. 

A determination of the extent to which data evaluation capability 
shall be incorporated into sensors shall be performed considering the 
usage of the sensor output data, the sensor output interface (see next 
paragraph), sensor mounting options, weight, power, sice, redundancy, 
flexibility, vehicle data bus traffic, and data processing requirements. 

An evaluation shall be made to determine whether a sensor output 
should interface directly with the vehicle data bus, or with an 
SIU or remote processor. Reaction time requirements for safety and 
control shall be a primary consideration in this evaluation. Other 
criteria to consider are the reductions in hardware power, weight and 
size, vehicle data bus traffic, and data processing requirements when 
the communication capability for a number of sensors is consolidated 
into an SIU or a remote processor versus the increase in redundancy 
and system flexibility with individually addressable sensors. The 
results of this evaluation shall be used in the definition of sensor 
electrical interfaces. 

Sensor electrical interfaces shall also include the definition of 
interfaces for sensor control commands and sensor electrical excitation. 
Sensor output enable and/or sensor self-check command requirements are 
dependent on the capabilities allocated to the sertsor. The interface (s) 
for sensor electrical excitation depend on the power requirements of 
previously allocated sensor capabilities, the requirements for calibration 
references, and the determination of the optimum allocation of power 
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conditioning capability. 

c 

The mechanical Interfaces of sensors with the propulsion elements 
shall be defined considering such aspects as accessibility, maintainability, 
environment, the effects of location on sensitivity and fidelity, 
calibration requirements, mounting torque, and the moments of externally 
mounted assemblies. 

Sensor accuracy shall be specified in conjunction with the accuracies 
of the other onboard elements (Sills, remote processors, central computers, 
displays) such that the total allowable error specified for the associated 
measurement parameter is not exceeded. Error allocation shall account 
for error sources whether they are random or time progressive and the 
relative cost to design and maintain each error allocation to attain 
the most favorable long life/cost characteristics. 

Final sensor specifications shall include: parameter type; sensing 

element type; range; accuracy; sensitivity; frequency response; 
environment (s) ; operational and service life; electrical and mechanical 
interfaces; physical limitation; self-check requirements; and calibration 
requirements and/or restrictions (including restrictions on adjustments). 

The assignment of sensor outputs to SIUs or remote processors 
shall be done in conjunction with the definition of those units . 

3. 2. 2. 2. 2 Subsystem Interface Units - The functional redundancy 
of the propulsion subsystems and proximity to those subsystems shall 
be primary considerations in the definition of the number of subsystem 
interface units (or portions thereof) assigned to service the propulsion 
subsystems . 
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Tradeoffs for the allocation of signal conditioning, data processing 
and stimuli generation are the principal criteria for establishing the 
types of SIUs that are optimum In accommodating the propulsion system 
requirements. Signal conditioning requirements shall be established 
through tradeoffs as described under sensors (Paragraph 3.2. 2. 2.1); 
that Is, distributed versus consolidated signal conditioning where the 
results Influence system power, weight, size, redundancy, flexibility, 
and failure detection capability. The amount of signal conditioning 
required shall also be considered In establishing the number of SIUs 
for propulsion system service. 

Data processing capability shall be traded off among sensors, SIUs, 
and central computers considering the actions, reactions and corresponding 
times required for propulsion system control; vehicle data bus traffic 
rates; central computer processing requirements; system power, weight, 
and size; system reliability and redundancy; ease of fault detection, 
fault Isolation, and redundancy management; and simplicity of software 
development. 

The extent of electrical power conditioning and distribution by 
SIUs for propulsion system stlmul\is or excitation shall be derived from 
the control requirements (both functional and checkout dictated) 
identified in Section 3.1. The extent of electrical power conditioning 
and distribution for sensor electrical excitation shall be determined 
in conjunction with the allocation of sensor capabilities and error 
budgets and shall consider the relative merits of consolidated versus 
distributed power conditioning. The requirements for the generation 
of stimulus for sensor control shall also be determined In conjunction 
with allocation of sensor capabilities. 
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3. 2. 2. 2. 3 Remote Processors - The quantity and speed requirements 
of data processing for control and fault detection are driving factors 

in the determination of whether or not remote processors shall be dedicated 
to major propulsion subsystems. Another major consideration is that 
the use of remote processors permits greater development of major 
subsystems prior to system and vehicle integration. 

The allocation of data processing, signal conditioning, stimuli 
generation, and electrical power conditioning and distribution capabilities 
to remote processors shall consider the same criteria used for the 
allocation of capabilities to sensors and SIUs with the exception that 
a remote processor should accommodate as much of the processing requirement 
of the associated subsystem as possible. External processing should 
be principally for system control or long term trend analysis and 
resource management. 

The implementation of a remote processor shall also consider its 
proximity to the associated propulsion subsystem, the functional redundancy 
of the propulsion subsystem, the criticality of each interface with 
the propulsion subsystem, and the degree of flexibility that is required 
to accommodate potential changes in requirements. 

3. 2. 2. 2. 4 Recorders - The implementation of the propulsion system 
recording requirements identified in Section 3.1 shall consider the 
peak rate of the propulsion system data to be recorded, the period of 
time for which data must be retained, the total recording capacity 
required for propulsion system data, the requirement to provide inflight 
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retrieval of propulsion system status and fault-isolation data, the 
requirement to adequately tag data for postflight evaluation, and the 
flexibility to accommodate changes in recording requirements based on 
mission requirements or on system trends, 

3, 2.2. 2, 3 Displays - The implementation of the propulsion system 
display requirements identified in Section 3,1 shall consider the 
criticality of the data as a principal factor in determining the 
type and redundancy of the reporting device (s) to be used. In addition 
to data criticality, the implementation of displays for propulsion 
system data shall consider the mission time, event, or time duration 
during which the display is required, the crew action required as a 
result of the display, the location of a display relative to other 
displays on which related data is presented, and the desirability of 
augmenting critical displays with alarms. 

3. 2. 2. 2. 6 Data Bus - In addition to fulfilling the requirements 
of other vehicle systems, the configuration of the vehicle data bus 
shall accommodate the propulsion system checkout, control, and monitoring 
requirements identified in Section 3.1 and shall be compatible with the 
allocation of functional capabilities for those requirements as 
determined by the guidelines of this section. The data bus design shall 
consider the reaction time requirements of the propulsion system, the 
criticality of accurate transmission of propulsion system commands and* 
responses, the peak data traffic requirements of the propulsion system 
in conjunction with the requirements of the other vehicle systems, and 
the flexibility to accommodate changes in requirements. 
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3. 2.2.2 .7 Central Computer Complex - The implementation of the 
vehicle central computer complex shall use the propulsion system require- 
ments derived in Section 3.1 and the allocation of capabilities defined 
in this section as criteria. The definition of central computer data 
processing requirements for propulsion shall be made in conjunction 
with the allocation of data processing capability to the sensors » SIUs, 
and remote processors. The propulsion system checkout, control and 
monitoring requirements shall be included into the criteria for deter- 
mining central computer instruction repertoire, instruction execution 
time, memory size, redundancy, and operational flexibility. 

3. 2 .2. 2. 8 Ground Support Equipment - The extent to which the 
checkout and monitoring function requirements of the Space Shuttle 
propulsion systems are implemented by ground support equipment shall 
be determined by tradeoff analyses considering: 

- Space Shuttle turnaround time and maintenance concepts 
Space Shuttle capability to land at a remote site 

- Postflight evaluation requirements 

- Maintenance retest requirements 

Preflight checkout and functional testing requirements 
Inflight versus ground requirements 

- Available airborne technology 

Size, weight, and power consumption of the necessary onboard 


equipment . 

Safety 

Crew participation 
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5.0 NOTES 

This section lists and defines terms and abbreviations used in the 

document. Further, it presents background information and rationale for 

assistance in understanding and applying the guidelines. 

5.1 Definitions - An alphabetical listing of definitions follows: 

CAUTION AND WARNING DISPLAY : the technique used to alert and inform the 

crew of the existence of an abnormal condition. 


CENTRAL COMPUTER COMPLEX : the primary system of data processing for 

the vehicle. 


CHECKOUT : the function of determining the capability of an element or 

system to perform its specified functional operations. 


COMPONENT OPERATING HISTORY DATA : data identifying the accumulated 

functional operations (such as numbers of cycles, time above a specified 
temperature, etc.) of a component. 


CONTROL : the function of starting, stopping, changing or otherwise 

regulating the functional operations of an element or system. 


CONTROL SEQUENCE AND OPERATIONAL LOGIC DIAGRAM : a system analysis tool 

that defines detailed sequences and conditions of operation of a system. 


DATA ACQUISITION : the process of sensing, signal conditioning to a 

usable form and transporting data to its destination. 


DATA PROCESSING : the calculations and/or cooparisons required to evaluate 

acquired data and to determine appropriate commands, and the operations 
requisite to recording and displaying data Including data identification 
and routing. 


DERIVED PARAMETER : a parameter whose magnitude is established by apply- 

ing a mathematical relationship to other parameters. An example of a 
derived parameter is flow rate calculated from temperature (density) and 
differential static pressure. 
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EMERGENCY DETECTION ; the detection of an abnormal condition that can 
progress into a catastrophic effectt 


FAULT DETECTION ; the determination that an element or system is perform- 
ing outside its specified functional operation limits. 


FAULT ISOLATION ; the identification of the element or group of elements 
that performed or is performing outside its specified functional opera- 
tion limits. 


FAULT PREDICTION : the determination made through trend analysis that 
the performance of an element or system has an unacceptably low proba- 
bility of remaining within specified limits. 


FLEET TRENDS ; information pertaining to performance characteristics and 
maintenance requirements of the fleet of vehicles during successive 
missions. 


FUNCTIONAL ELEMENT ; an element that provides a function in addition to 
or other than structural integrity, and is capable of functional opera- 
tion. 


FUNCTIONAL OPERATION ; the change of state or condition of an element 
or system such as a response to a control command. 


FUNCTIONAL TESTING ; checkout that is performed by inducing functional 
operations on an element or a sequence of functional operations on an 
element or system. 


GROUND SUPPORT EQUIPMENT ; for checkout and monitoring, the equipment that 
is needed, in addition to the on-board equipment, to accomplish the check- 
out and monitoring functions. 


LINE REPLACEABLE UNIT ; an element or group of elements that can be 
removed, replaced and retested within the constraints of the vehicle 
turnaround cycle timeline. 


MAINTENANCE ; those functions and activities associated with restoring 
the vehicle to an operational condition between flights. 
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MAINTENANCE RETEST ; the function of verifying the capability of this 
system to perform its prescribed functional operations subsequent to 
maintenance activities. 


MEASUREMENT ; a single source of data relating to the magnitude of a 
parameter. 


MEASURED PARAMETER ; a parameter that can directly be measured. 


MISSION PHASES ; the repetitive set of discrete, sequential ground and 
flight operations of the Space Shuttle. 


MONITORING ; the function of determining whether an element or system is 
performing its functionial operations with specified limits. 

PARAMETER ; a physical characteristic, state or condition. Examples 
include position, temperature, and flow rate. 


POSTFLIGHT EVALUATION ; the function of identifying elements that require 
maintenance either because they have not performed their functional 
operations within specified limits, or because their trend of perfor- 
mance indicates that the specified performance will not be attained 
during the pext functional operation or flight. 


POSTFLIGHT SAFING AND PURGING ; those operations conducted after landing 
to place the vehicle in a safe, inert condition. This operation can 
include venting pressure vessels, draining propellants and purging tanks 
and lines, safing and removing pyrotechnic devices, etc. 


PRE START ; a period immediately prior to initiation of a functional opera 
tion of an element or system, either on the ground or in flight. 


PRESTART CHECKOUT ; an evaluation conducted just prior to initiation of 
a functional operation to assess the capability of the element or system 
to operate within specified performance limits. 


POSTFLIGHT CHECKOUT ; checkout performed during postflight safing and 
purging operations. 
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REDUNDANCY MANAGEMENT ; the function of reacting to the detection of an 
existing or potential emergency condition by activating a redundant path, 
function or element to alleviate the condition. 


REDUNDANCY VERIFICATION ; assessment of the capability of redundant 
functional elements to perform their specified functional operations. 


REMOTE PROCESSOR : a computer which performs data processing and control 

sequences in response to high level commands from the central computer 
conq>lex. 


SELF- CHECK ; the process by which a functional element assesses its own 
operational integrity and readiness. 


SENSOR : a functional element that responds to a physical quantity or 

event and converts that response to transmissible data which is propor- 
tional to the magnitude of the quantity or indicates the occurence of 
the event. 


STATUS VERIFICATION ; verification that parameters are within specified 
limits or at specified values. 


STIMULUS ; an excitation or forcing function that is applied from a 
source external to a functional element. 


SUBSYSTEM INTERFACE UNIT ; an intermediary that interfaces a user sub- 
system (e.g., a propulsion subsystem) to the vehicle avionics system. 

SIU performs a control function by translating avionics system commands 
into stimuli for the user subsystem and acquires data from the user 
subsystem for use by other vehicle and ground systems. 


TREND ANALYSIS ; the Identification of changes in performance of an 
element or system during successive functional operations or flights, 
and the evaluation of such changes to determine the probabilities of 
performance degrading outside specified limits in subsequent functional 
operations or flights. 
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5.2 Abbreviations - Abbreviations used in the text of the document 
are defined as follows: 

OCMF On-board Checkout and Monitoring Function 

LRU Line Replaceable Unit 

GSE Ground Support Equipment 

NASA National Aeronautics and Space Administration 

MSFC Marshall Space Flight Center 

DM&C Data Management and Control 

CCC Central Computer Complex 

SIU Subsystem Interface Unit 


5.3 Supplementary Information - (Any material considered to en- 
hance the use or understanding of this documeiit will be included in this 
paragraph) . 
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IV. STATUS AND RESULTS - TASK III 


Task III Is directed toward the definition of the checkout and 
monitoring requirements of the large diameter core Titan (T-III L). 
The detailed objectives^ guidelines^ and approach for this task are 
presented in the Project Flan (Rev. B). 

Task III has been completed during this report period and the 
contents are presented In the following manner. 


SECTION IV-A 
SECTION IV-B 
SECTION IV-D 
SECTION IV-E 


Task III Discussion 

Propulsion System Definition 

Checkout and Monitoring Requirements Analyses 

Checkout and Monitoring Requirements Implementation 


Appendix A 


Titan III Propulsion Measurement Usage 


The Propulsion System Definition section^ presented in the July- 
September Quarterly Progress Report^ has been updated to reflect suggested 
changes. This section is presented again for continuity purposes. The 
FMEA's^ presented as appendix A of the October monthly^ are not resubmitted 
at this time, but will be presented as a portion of the Final Report. The 
ground rules governing the FMEA's are presented in Section IV-C. 



SECTION IV-A TASK III DISCUSSION 


The objective of Task III Is to define and evaluate the propulsion 
Checkout and Monitoring requirements for the Titan III-L expendable 
booster. 

Task III was conducted within the following guide lines. 

1. Conclusions and recommendations are to be consistent with the 
objective of maximizing cost effectiveness In the Space Shuttle 
program. 

2. Maximum use will be made of the Space Shuttle Phase B Extension 
Study. 

3. The study Is restricted to the checkout and monitoring require- 
ments of a selected baseline T-III L Propulsion Systems. 

4. The analyses are limited to that of typical system, subsystems, 
assemblies and components. 

5. This task will consider only the fully operational vehicle 
configuration. 

6. If Insufficient data Is available on the orblter or booster, 
appropriate asstmq>tlons will be made and documented. 

The approach to Task III accomplishment Is based on the methodology 
developed during our basic study contract and the "Guidelines For In- 
corporation Of The Onboard Checkout and Monitoring Function On The Space 
Shuttle", Task II, of the current study. 

Since the "Guideline" document Is being developed In parallel with 
this task, only the approaches and formats available during the develop- 
ment of each task element have been Incorporated. The task was divided 
into four basic elements; Propulsion System Definition, Propulsion System 
Analyses, Checkout and Monitoring Requirements Analyses, and Checkout 
and Monitoring Requirements Inq>lementatlon. This approach which Is In 
accord with the Task II methodology, has been utilized In the presenta- 
tion of the material In the following sections. 

The result and conclusions of the Titan III L Checkout and Monitoring 
Requirements study are summarized as follows: 



1. To maximize cost effectiveness, the checkout and monitoring 
techniques utilized on the operational Titan Ill's should be 
retained for the Titan III L study configuration. 

2. Certain control functions, l.e., flight control, booster 
staging, and portions of emergency reaction controls can best 
be handled by the Orblter. 

3. The Onboard Checkout and Monitoring functions Identified by 
Task II are directly applicable to the expendable Booster 
propulsion. Only the degree of usage and location of accom- 
plishments are different. 

4. The Checkout and Monitoring impact on the orblter Is slight. 

A limited amount of data Is transmitted to the orblter for 
crew alert (caution and warning) and emergency action. 

5. The study lnq>act on existing hardware design Is of a minor 
nature. The direct impact is to the instrumentation, i.e., 
the degree of required measurements, measurement redundancy 
and sensor locations. 

Two supporting research and technology items have been Identified 
by the Failure Modes and effects analyses conducted during the Pro- 
pulsion Systems Analysis Study. A solid rocket motor case burnthrough 
detector and a liquid rocket engine compartment fuel leakage or fire 
detetector were Identified. Further evaluation of the best technical 
approach and the current "State-Of-The-Art" are required before a firm 
recommendation can be made on these items. 



SECTION IV»B Propulsion System Definition 


Space Shuttle Vehicle Configuration 


Booster Configuration 


Booster Main Propulsion System 


Main Engine Subsystem 


Main Propellant Management Subsystem 


Main Pressurization Subsystem 


Solid Rocket Motor System 


Rocket Motor Subsystem 


Thrust Vector Control Subsystem 


Operations 
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A. PROPULSION SYSTEM DEFINITION 
SPACE SHUTTLE VEHICLE CONFIGURATION 


The selected study configuration Is the Martin Marietta Corporation 
Baseline Vehicle on August 23, 1971, Figure IV-1. The Space Shuttle 
vehicle is composed of an expendable Titan III large diameter core 
booster (T IIIL) and the updated Grumman H-33 drop tank orblter. Figure 
IV-2. The orbiter is the identical configuration to be used with the 
fully reusable Space Shuttle with the exception of the hydrogen drop 
tanks. The drop tanks are somewhat smaller when used with the expendable 
booster. The useful payload into a 100 nmi. design orbit is 45,000 lbs. 
The orbiter payload capability is Increased to 65,000 lbs. when the 
reusable booster is used as the launch vehicle. In the selected con- 
figuration, the orbiter is attached to the booster in a piggy back 
fashion. 
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Figure IV-2 Grumman H-33 Orbiter 


157' 
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BOOSTER CONFIGURATION 

The selected Titan IIIL booster is designated as the 1207-4 
spread configuration. The booster stage consists of a sixteen foot 
diameter liquid fuel core with five (Aerojet Liquid Rocket Company) 
LR-87 engines and four 120 inch (United Technology Center) UA 1207 
solid rocket motors mounted in the yaw plane, two on either side of 
the core. The liquid fueled core utilizes nitrogen tetroxlde as an 
oxidizer and Aerozlne-50, a solution of Hydrazine and UDMH, as a 
fuel. Five core engines supply a total sea level thrust of 1,133,370 
pounds. The liquid rocket engines are precanted 9° in pitch to compen- 
sate for the CG Z-axis offset. The center engine is hinged in pitch 
to facilitate CG tracking while the outboard engines have gimbal 
capabilities of plus or minus 4.5 degrees in pitch and yaw. The four 
solid rocket motors develop a total of 5,570,400 pounds-thrust. The 
engine nozzles are precanted six degrees in a plane rotated 30 degrees 
out of pitch. The cant and rotation angles are chosen to facilitate 
CG tracking and to minimize the individual SRM moment arms at the end 
of web action time. The booster configuration is shown in Figure IV-3. 
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1.0 BOOSTER MAIN PROPULSION SYSTEM 

The booster main propulsion system consists of 5 liquid propellant 
rocket engines attached to an airframe which Includes the fuel and 
oxidizer tanks, between-tank structure, forward skirt and aft skirt. 

The rocket engines utilize 12 tl expansion thrust chambers, each of 
which Is supplied propellant from Its own turbine-driven pump. The 
fuel and oxidizer tanks are welded structures consisting of a forward 
dome, barrel section and aft dome. An aft heat shield encloses the 
Stage I engine compartment to protect main engine components from 
radiant heat produced by the exhaust plumes of the solid rocket motors. 
The boattall Is aluminum and covers those portions of the engine above 
the thrust chamber throat. A rubber boot provides further protection 
for the thrust chamber assembly above the throat. Covers, made of 
Refrasll sandwiched between two layers of Inconel, protect each thrust 
chand>er from Injector to aft end but are not a part of the aft heat 
shield. Exit closures are provided to protect the thrust chand>er 
Interior from moisture. These closures are blown off when booster 
engine operation Is Initiated. Rubber covers over the turbine exhaust 
stacks are blown off by start cartridge gas pressure at engine start. 

Thrust vector control Is accomplished by glmballlng the engine 
thrust chambers to provide pitch, yaw and roll corrections. Hydraulic 
actuators, driven from the engine turbopuop and controlled by electrical 
signals from the guidance and flight control systems, provide the glmbal 
force. Stage I operates for approximately 276 seconds and uses 800,600 
lb of nitrogen tetroxide (^28^) oxidizer and 419,000 lb of 50% hydrazine 
and 50% UDMH fuel. The booster engines shut down when one of the propel- 
lants Is exhausted. Figure IV-4 Is a schematic representation of the 
Main Propulsion Subsystem. Table IV-1 presents the propulsion system 
and subsystem numerical Identification. 
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1.0 BOOSTER MAIN PROPULSION SYSTEM 

The booster main propulsion system consists of 5 liquid propellant 
rocket engines attached to an airframe which Includes the fuel and 
oxidizer tanks, betweaj-tank structure, forward skirt and aft skirt. 

The rocket engines utilize 12:1 expansion thrust chambers, each of 
which is supplied propellant from Its own turbine-driven pump. The 
fuel and oxidizer tanks are welded structures consisting of a forward 
dome, barrel section and aft dome. An aft heat shield encloses the 
Stage I engine compartment to protect main engine components from 
radiant heat produced by the exhaust plumes of the solid rocket motors. 
The boattall Is aluminum and covers those portions of the engine above 
the thrust chamber throat. A rubber boot provides further protection 
for the thrust chamber assembly above the throat. Covers, made of 
Refrasil sandwiched between two layers of Inconel, protect each thrust 
chamber from injector to aft end but are not a part of the aft heat 
shield. Exit closures are provided to shield the thrust chamber 
interior from heat. These closures are explosively separated when 
booster engine operation is initiated. Rubber covers over the turbine 
exhaust stacks are blown off by start cartridge gas pressure at engine 
start . 

Thrust vector control Is accomplished by glmballlng the engine 
thrust chambers to provide pitch, yaw and roll corrections. Hydraulic 
actuators, driven from the engine turbopump and controlled by electrical 
signals from the guidance and flight control systems, provide the gimbal 
force. Stage I operates for approximately 276 seconds and uses 800,600 
lb of nitrogen tetroxide (N 2 O 4 ) oxidizer and 419,000 lb of 50% hydrazine 
and 50%, UDMH fuel. The booster engines shut down when one of the propel- 
lants is exhausted. Figure IV-4 is a schematic representation of the 
Main Propulsion Subsystem. Table IV-1 presents the propulsion system 
and subsystem numerical identification. 
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TABLE IV- 1 

PROPULSION SYSTEM AND SUBSYSTEM 
NUMERICAL IDENTIFICATION 
(BOOSTER) 


1.0 Booster Main Propulsion System 

1.1 Main Engine Subsystem 

1.2 Main Propellant Management Subsystem 

1.3 Main Pressurization Subsystem 


2.0 Solid Rocket Motor System 

2.1 Rocket Motor Subsystem 

2.2 Thrust Vector Control Subsystem 
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ENGINE MODULE 
TYPICAL 5 PLACES 



Figure IV-4 


Main Propulsion Subsystem Schematic 
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1.1 MAIN ENGINE SUBSYSTEM 

The Titan III-L main engine subsystem is a storable liquid propel- 
lant, turbopump fed configuration that develops 226^670 level 

and 257,750 lb altitude thrust. 

The rocket engine consists of the following subassemblies: turbo- 

pump assembly, thrust chamber valve assembly, gas generator assembly, 
thrust chambers assembly, engines start assembly^ and the TVC assembly. 

The suction lines duct the fuel (Aerozine-50) and oxidizer 
(nitrogen tetroxide) from the propellant tank lines to the turbopumps, 
each of which is driven by a turbine rated at 5000 h.p. The fluid 
pressure is increased through the pumps by over 1000 psi to force the 
propellant through the discharge lines into the thrust chamber. Thrust 
chamber valves are utilized to control engine start and shutdown. The 
gas generator is operated by propellant from the discharge lines to 
drive the turbines which maintain propellant flow. Combustion in the 
thrust chamber produces gas at a pressure of 800 psia and temperature 
of approximately 5000op. 

Thrust vector control (pitch, yaw and roll) is achieved by pivot- 
ing the thrust chamber on gimbal bearing mounts. The gimbal action of 
the thrust chamber is provided by hydraulic actuators which operate in 
response to signals from the launch vehicle control system. 

The engine is hydraulically balanced and requires no thrust controls. 
It is pre-set to operate at a certain level, i.e., consume propellant 
at a fixed rate, by the use of orifices. Balance orifices in the propel- 
lant discharge lines and cavitating venturis in the gas generator boot- 
strap lines determine the steady-state level. The propellant flow rate 
established by the discharge line orifices is a function of both up- 
stream and downstream pressures. The cavitating venturis establish a 
flow rate that is sensitive only to upstream pressure, maintaining a 
constant flow rate over a wide range of downstream pressures. The con- 
trol of propellant flow rate to the gas generator results in a stablized 
turbine speed. The propellants are hypergolic (they ignite on contact 
with one another), and, therefore, no ignition system is required to 
initiate combustion in the thrust chambers or gas generators. 

The Main Engine Subsystem schematic is shown in Figure IV-5. 

Each main engine module contains the following assemblies and components. 
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MAIN ENGINE SUBSYSTEM 


1.1.1 Thrust Chamber Assembly 

1.1. 1.1 Injector 

1.1. 1.2 Combustion Chamber 

1.1. 1.3 Ablative Skirt 

1.1. 1.4 Thrust Chamber Pressure Switch (3)- 

1.1.2 Thrust Chamber Valve Assembly 

1.1. 2.1 Oxidizer Thrust Chamber Valve 

1.1. 2. 2 Fuel Thrust Chamber Valve 

1.1. 2. 3 Pressure Sequencing Valve 

1.1. 2.4 Overboard Drain Check Valve 

1.1.3 Turbopump Assembly 

1. 1.3.1 Oxidizer Pump 

1.1. 3. 2 Fuel Pump 

1.1. 3. 3 Gear Box 

1.1. 3.4 Lube Oil Pump 

1.1. 3. 5 Lube Oil Heat Exchanger 

1.1. 3.6 Turbine 

1.1. 3. 7 Exhaust Stack 

1.1.4 Gas Generator Assembly 

1. 1.4.1 Gas Generator 

1.1.4. 2 Oxidizer Check Valve 

1.1. 4. 3 Fuel Check Valve 

1. 1.4.4 Oxidizer Cavltatlng Venturi 

1.1. 4. 5 Fuel Cavltatlng Venturi 

1. 1.4.6 Oxidizer Line Filter 

1. 1.4.7 Fuel Line Filter 

1.1.5 Engine Start Assembly 

1.1. 5.1 Start Cartridge 

1.1. 5. 2 Initiator 

1.1.6 Thrust Vector Control Assembly 

1.1. 6.1 Glmbal Block 

1.1. 6. 2 Glmbal Actuator (2) 

1.1. 6. 3 Hydraulic Pump 

1.1. 6. 4 Auxiliary Pump 
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TYP. 

3 PLCS 



OVERBOARD DRAIN 


1 - ORIFICE 

CAVITATING VENTURI 

BURST DIAPHRA©! 

FILTER 

-■ 

SONIC FLOW 

QUICK DISCONNECT 

CONTROL NOZZLE 


FUEL 

i ^ fuel pressurant 

HMMW OXIDIZER 

OXIDIZER PRESSURANT 
HOT GAS 
lube OIL 


Figure IV-5 Main Engine Schematic 
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1.2 MAIN PROPELLANT MANAGEMENT SUBSYSTEM 

The main propellant management subsystem provides feed, distribu- 
tion and storage of the propellants. The propellant tanks are mounted 
in tandem with the oxidizer tank in front. The fuel tank has 5 internal 
conduits to duct the oxidizer to the rocket engines. Both tanks have 
an access cover in the forward dome. The between-tank structure and 
the skirts have welded frames to which the aerodynamic surface is 
riveted. Access doors are provided in the forward and aft sections 
and in the between-tank structure, and four longerons on the aft 
skirt allow for SRM attachment. All of the skin and much of the 
airframe stiffening structure is aluminum, and the skin is tapered 
and milled where possible to save weight. The oxidizer tank is 16 feet 
in diameter and has a 9000 ft^ volume. Five 7 inch diameter feedlines 
are used to deliver oxidizer to the engines. The fuel tank is also 16 
feet in diameter with 7600 ft^ volume* Five six inch diameter 
feedlines are used to deliver fuel to the engines. Appropriate tank 
baffles and contoured outlets are provided for each tank. Figure IV-6 
presents the configuration of the propellant management subsystem. 



Figure IV-6 Main Propellant Management Subsystem 
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The Main Propellant Management Subsystem is composed of the follow- 
ing assemblies and components: 

MAIN PROPELLANT MANAGEMENT SUBSYSTEM 

1.2.1 Oxidizer Tank Assembly 

1.2. 1.1 Oxidizer Tank 

1.2. 1.2 Oxidizer Pogo Suppressor 

1.2. 1.3 Oxidizer Prevalve 

1.2.2 Fuel Tank Assembly 

1.2. 2.1 Fuel Tank 

1.2. 2. 2 Fuel Pogo Suppressor 

1.2. 2. 3 Fuel Prevalve 


1.3 MAIN PRESSURIZATION SUBSYSTEM 


The main pressurization subsystem provides the necessary Inlet 
pressure to the engine pumps for proper pump operation. The propel- 
lant tanks are pre-pressurized with nitrogen prior to engine start 
through the two inch tank vents. During engine operation, pressur- 
izing gas Is supplied to the tanks by the engine autogenous (self- 
generating) system at a controlled rate to make up for the removal 
of propellant from the tanks. The fuel tank is pressurized by 
diverting a portion of the engine gas generator output from the 
turbine inlet manifold to the tank. This gas must be cooled to be 
safely used, and cooling is accomplsihed by passing it through a 
heat exchanger with fuel. The fuel flows from this discharge line 
through the gas cooler back to the suction side of the pump. A sonic 
nozzle in the autogenous gas line near the engine to vehicle interface 
maintains a flow rate that is insensitive to tank pressure, and a 300 
psid burst diaphragm prevents gas flow to the tank until gas generator 
operation begins. 

The oxidizer tank is pressurized by heating oxidizer to the gaseous 
state and ducting it to the tank. Oxidizer is piped from the pump dis- 
charge flange to a heat exchanger (fluid heater) located in the turbine 
exhaust stack. A cavltatlng venturi, located at the fluid-heater inlet, 
maintains a constant flow rate insensitive to downstream pressure, and 
a burst diaphragm prevents oxidizer autogenous flow until the discharge 
pressure reaches approximately 300 psla. A loop in the inlet line 
traps air to ensure pneumatic operation of the burst diaphragm. An 
orlflced bypass line on the fluid heater provides temperature control 
of the tank pressurant without affecting engine balance in the same 
manner as the bypass orifice in the fuel autogenous gas cooler. A 
back pressure orifice, located at the engine to vehicle interface, 
provides sufficient residence time of the oxidizer in the fluid heater 
to achieve the proper gas temperature of the pressurant. 

The Main Pressurization Subsystem is shown schematically in 
Figure IV-7. The assembly and component identification follows Figure 
IV-7. 



Burst 

Diaphragm 
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MAIN PRESSURIZATION SUBSYSTEM 


1.3.1 Oxidizer Pressurization Assembly 

1.3. 1.1 Fluid Heater 

1.3. 1.2 Cavltating Venturi 

1.3. 1.3 Back Pressure Orifice 

1.3. 1.4 Burst Diaphragm (autogenous) 

1.3. 1.5 Check Valve 

1.3. 1.6 Oxidizer Pressurization and Vent Valve 

1.3. 1.7 Oxidizer Tank Diaphragm 


1.3.2 Fuel Pressurization Assembly 

1.3. 2.1 Gas Cooler 

1.3. 2. 2 Sonic Nozzle 

1.3. 2. 3 Burst Diaphragm (autogenous) 

1.3. 2. 4 Check Valve 

1.3. 2. 5 Fuel Pressurization and Vent Valve 

1.3. 2. 6 Fuel Tank Diaphragm 
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2.0 SOLID ROCKET MOTOR SYSTEM 

The solid rocket motor system consists of four solid rocket 
motors (SRM) and thrust vector control (TVC) subsystems. Each SRM 
consists of a forward closure » an aft closure, and identical, inter- 
changeable segments. Other components Include a single 6^ canted 
nozzle, and fore and aft solid propellant staging rockets. The TVC 
injectant, nitrogen tetroxide, is carried in a tank mounted on the 
side of the motor and is pressure-fed into the nozzle exit section 
by nitrogen gas. Figure IV-8 illustrates components and assemblies 
of the Solid Rocket Motor System. 

2.1 ROCKET MOTOR SUBSYSTEM 

The selected motor is composed of seven segments designated 
as model 1207. Thrust termination capability, developed on the orig- 
inal T-IIIC SRM, is provided for Model 1207 through the use of ports, 
located at the forward end of the motor, which may be ejected on 
command to permit thrust termination in case mission abort becomes 
necessary. 

The motor case (segments and closures) is constructed of D6aC 
steel, heat-treated to an ultimate strength of 195,000 psi. Each 
joint is a pin and clevis type held together by 240 cylindrical pins, 
luring assembly of the motor, the pins are inserted by hand (rather 
than force fitted) and held in place thereafter by a retaining strap. 

A gas pressure seal between segments (and closures) is provided by 
an o-ring. 

Each segment contains approximately 72,400 lb of polybutadiene 
acrylic acid acrylonitrile (PBAN) composite propellant which uses 
powdered aluminum fuel and ammonium perchlorate oxidizer. The plastic 
matrix, PBAN, also serves as a fuel. The case-bonded propellant grain 
has a circular port which tapers 10 inches throughout the 10-foot 
length of the segment. The forward end has the smaller port. The 
purpose of this taper is to provide the 10-second controlled tail-off 
at the end of web-action time. The forward end of the segment is 
inhibited from burning by a rubber restrictor bonded to the propellant 
surface. Silica-filled, butadiene acrylonitrile rubber insulation 
protects the motor case from combustion gas during motor operation. 

The insulation is thickest in the segment joint areas where there is 
no unburned propellant to protect the case walls. 

The closures contain the same type of propellant as the segments, 
and the forward closure has mounting provisions for the gas generator 
type igniter. Instead of the cylindrical grain shape of the segment, 



IV- 21 



Figure IV-8 Solid Rocket Motor System 
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the forward closure has an 8-polnt star Internal burning grain config- 
uration. The forward closure of Model 1207 Is 135 Inches long and 
contains 61^000 lb of propellant. The aft closure contains approxi- 
mately 20,300 lb of propellant In a straight cylindrical bore config- 
uration and projects 64 Inches from the segment Joint to a 57-lnch 
I.D. boss for nozzle attachment. 

The propellant burns along the entire central port of the SRM 
and also on the aft end of each segment between segments. The closures 
also burn on their ends. Three inches of clearance are left between 
the grains of adjacent segments to permit this burning. The Igniter 
burns for approximately 1 second to fill the grain bore with hot 
gas to Ignite the motor. The SRM has a regressive thrust-time curve 
produced In part by the star configuration of the propellant grain 
in the forward closure of the motor. During the early phases of burn- 
ing, this portion contributes much of the gas flow necessary to pro- 
duce the high initial peak in the thrust-time curve. 

The SRM nozzle consists of a throat section and a two-piece 
exit cone assembly. High-denslty graphite rings backed by a steel 
support shell and silica insulation are bonded In a steel housing to 
make up the nozzle throat section. The nozzle middle section consists 
of graphite and silica phenolic liners bonded to a steel outer shell. 
This section contains the thrust vector contrpl injection ports. The 
exit section Is an extension of the silica phenolic liner of the 
middle section except that Its structural shell Is aluminum honeycomb 
sandwiched between steel for lighter weight. The three sections are 
bolted together forming an assembly approximately 14-5 feet long. 

Nozzle expansion ratio is 9.18:1, and the half-angle is 17°. The SRM 
assemblies and con^onents are listed below. Figure IV-9 depicts the 
subsystem. 

ROCKET MOTOR SUBSYSTEM 


2.1.1 SRM Assembly 

2. 1.1.1 Forward Closure 

2. 1.1.2 Segment (7) 

2. 1.1. 3 Aft Closure 

2. 1.1.4 Nozzle 

2. 1.1.5 Rocket Motor Igniter 

2. 1.1.6 Thrust Terminating Device 

2. 1.1.7 Destruct Device 

2.1.2 Staging Rocket Assembly 

2. 1.2.1 Staging Rocket Motor (18) 

2. 1.2. 2 Staging Rocket Motor Housing 
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Figure IV-9 Rocket Motor Subsystem 
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2.2 THRUST VECTOR CONTROL SUBSYSTEM 

Thrust vector control for the UA 1207 SRM is achieved through 
fluid injection in the nozzle exit cone. The 3.5 ft. diameter injec- 
tant tank, which is mounted on the inboard side of the SRM near the 
core, contains 12,000 lb of nitrogen tetroxide and is charged with 
nitrogen gas to a pressure of 1,100 psi. The pressure of the ullage 
blowdown system decays to about 500 psi during the flight duty cycle. 

Nitrogen tetroxide fluid passes through an injectant transfer 
tube and a toroidal injectant manifold to the 24 electromechanical 
injectant valves. These valves are located in groups of six in the 
four quadrants of the nozzle exit cone and actuated electrically in 
response to commands from the core guidance system. The TVC subsystem 
can provide the required side forces with only five of the six valves 
operable in any quadrant. 

The TVC subsystem is sized to provide vehicle steering through 
burning and tail-off of the SRM. The subsystem will provide a Jet 
deflection of 0 to 4 degrees. The subsystem is designed to dump 
excess nitrogen tetroxide during booster operation to minimize burn- 
out weight, and is capable of a slew rate of 10 degrees per second 
at all times during SRM operation. 

During countdown, pressurized fluid from the tank fills the entire 
TVC system through the injectant valves to aluminum cylinders and caps 
(pyroseals) that protrude into the nozzle exit cone. The combination 
of the ullage blowdown and the pyroseals permits holds of up to 30 
days without recycling or refurbishing any injection hardware. The 
pyroseals and caps extend a short distance into the nozzle and are 
burned off at ignition by the exhaust flame, thus activating the TVC 
system. Provision is also made for bleeding the TVC system should it 
be necessary to depressurize or empty the TVC tank. The subsystem config- 
uration is shown in Figure IV-10. The TVC assemblies and components are as 
follows : 

THRUST VECTOR CONTROL SUBSYSTEM 


2.2.1 TVC Tank Assembly 

2. 2. 1.1 Injectant Tank ' 

2. 2. 1.2 Nitrogen Pressurization Valve 

2.2. 1.3 Injectant Fill and Drain Valve 

2. 2. 1.4 Injectant Transfer Tube 

2.2.2 Injectant Valve Housing Assembly 

2. 2. 2.1 Injectant Valve (24) 

2. 2. 2. 2 Pyroseal (24) 
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Figure IV- 10 Thrust Vector Control Subsystem 




OPERATIONS 


Figure IV-11 depicts the operational timeline for the Titan III-L 
and the drop tank orblter. The booster vehicle checkout and assembly 
is similar to the operation presently performed on the Titan III-B 
vehicle. A checkout matrix is shown in Table IV-2 and the vehicle 
assembly flow is shown in Figure IV-12. A new fuel loading system is 
supplied to load the booster stage with liquid propellants. The load- 
ing system is functionally the same as that used for the Titan III-D, 
except that removable sight glasses are used for load verification. 

The main propulsion tanks are loaded with 800,600 lb. oxidizer and 
419,000 lb. fuel. The TVC tank is loaded with 12,000 lb. of nitrogen 
tetroxide. At T-60 hours, the main propellant management subsystem 
is pre-pressurlzed to 28 psia and the TVC subsystem is pressurized to 
a flight pressure of 1,100 psia. At T-2 hours, after arming and ready 
status verification, the final countdown is initiated. 

At T-35 seconds, an automatic sequence signal is supplied to the 
launch vehicle. This signal accomplishes the following: (1) the stor- 

age valves are opened permitting fuel and oxidizer to fill the engine, 
and (2) the engine starting electrical circuits are readied for receipt 
of the firing signal. 

Opening of the prevalves places the engine in the fill and bleed 
condition. Both fuel and oxidizer fill the engine above the thrust 
chamber valves due to the static pressure of the propellants in the 
tanks above the engine. Air entrapped in the oxidizer lines travels 
through 3/8 inch flex lines, connected on each subassembly from the 
discharge line near the punq> outlet flange (high point) to the suction 
line, up into the oxidizer tank. Air removal from the fuel lines is 
accomplished as fuel hydraulic pressure actuates the thrust chamber 
valves at engine start. 

The fuel-operated valve actuation system consists of a rod and 
piston mechanically linked to the thrust chamber valves (TCV's), held 
closed by springs and opened by fuel pressure. A pressure sequencing 
valve (PSV), also held closed by a spring and opened by fuel pressure, 
acts as a pilot valve to the TCV actuator. Fuel bleed is accomplished 
by allowing fuel to flow through a 1/2 inch flex line from the high 
point on the discharge line at the TCV and discharge line connecting 
flanges to> the PSV inlet port. While in the bleed position, the PSV 
diverts the fuel into and through the closing side of the TCV actuator, 
through a 1/4 inch stainless steel vent line to an overboard manifold 
mounted on the PSV, and out an overboard drain line through a check 
valve which serves only to protect the PSV from contamination. A bleed 
orifice, located in the drain line and PSV manifold connection, controls 
the bleed rate to approximately 1200 cc per minute per engine. As 
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Figure IV-11 


hour; 






TABLE IV-2 
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BOOSTER BBOFULSION CHECKOUT 


Test Nomenclature 

1. Booster Main Propulsion System 

Instrumentation Check 
Electrical Harness Check 
TCPS Check 
TPA Torque Check 
Thrust Chamber Valve Functional 
PSVOR Position Verification 
Torque Verification Test 
Engine Leak Checks 
Ordnance Test 
Propellant Tank Hydrostat 
Propellant Tank Leak Check 
Prevalve Switch Test 
Propellant Tank Calibration 
Prevalve Boreacope Inspection 
Accumulator Compliance Test 

2. Solid Rocket Motor System 

Instrumentation Check 
Alignment Checks 
TVC Subsystem Leak Check 
Injectant Valve Functional 
Ordnance Test 
Composite System Test 
SRM Leak Check 

3 . Combined Propulsion System 

Flight Instrumentation Check 
Ordnance Check 
Combined System Leak Check 
Combined System Test 
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long as the engine remains in the fill and bleed condition^ fuel is 
bled overboard in the manner and at the rate described. 

After completing the bleed cycle^ the start signal applies 28 vdc 
to the initiator charges of a solid propellant start cartridge mounted 
on the turbine inlet manifold of each engine. Two diametrically 
opposite engines are started sequentially at 0,1 second intervals. The 
center engine is started at 0.1 second after start command to the last 
pair. The start cartridge solid propellant ignites and supplies gas 
to the turbines causing them to accelerate. The turbine shaft of each 
engine is connected through a gear train to the fuel and oxidizer 
pump so that pump operation also begins. Since the thrust chamber 
valves are closed, no propellant flows, and pump acceleration produces 
only an increasing pressure in the discharge lines and valve actuation 
system. 

When fuel discharge pressure reaches approximately 300 psia, the 
pressure on the opening end of the PSV spool produces a force which 
exceeds the spring force on the PSV spool closing end causing the spool 
to shuttle from the bleed position to the operation position. This 
occurs approximately 0,25 seconds from FS-1, Relocation of the PSV 
spool to the operation position halts flow of fuel to the closing side 
of the TCV actuator, terminating fuel bleed^ and allows fuel to enter 
the actuator opening side. The fuel pressure, increasing beyond the 
300 psia PSV actuation pressure, is immediately sufficient to operate 
the TCV actuator initiating opening of the thrust chamber fuel valves. 
The fuel and oxidizer valves are mechanically linked so that both move 
simultaneously. The rate of motion of the TCV actuator piston is con- 
trolled by an orifice located in the overboard drain manifold to PSV 
housing connection nearest the PSV opening end. This opening orifice 
controls the rate at which bleed fuel can be expelled from the TCV 
actuator. Valve opening begins approximately 0.3 second after start 
cartridge initiation. At approximately 1.1 seconds after FS-1 the 
valves are fully opened. 

Propellants begin to flow to the thrust chamber at the time the 
valves begin to open. Oxidizer flows directly into the injector dome, 
filling the oxidizer injector manifold, through orifices into the 
combustion chamber. Fuel is used to regenerative ly cool the combustion 
chamber and must fill a toroidal manifold and flow through stainless 
steel cooling tubes that make up the chamber walls before reaching 
the injector fuel orifices and entering the combustion zone. The 
larger volume the fuel must fill before reaching the injector orifices 
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results In an oxidizer lead into the combustion zone. This slight 
oxidizer lead (0.25 to 0.30 sec) provides a characteristically smooth 
start. Initial pressurization of the chamber during oxidizer lead 
ejects the skirt exit closures. 

Opening the thrust chamber valves causes a momentary decrease in 
discharge pressures as the volume between the TCV’s and injector orifices 
is being filled with propellant. At approximately 0.8 second after 
FS-1 this filling is completed and hypergollc ignition of the fuel and 
oxidizer takes place in the combustion chamber. At this point in time 
pressure in the discharge lines again increases^ and fuel and oxidizer 
are forced through flex lines attached from the main propellant dis- 
charge lines, downstream of the TCV*s, to the gas generator. Check 
valves located at the gas generator end of these bootstrap lines pre- 
vent the flow of start cartridge gas into the discharge lines. The 
gas generator ignites at approximately 0.9 second after FS-1 and supplies 
gas to drive the turbines. At approximately 1.1 seconds after FS-1, the 
start cartridge burns out, and the engine has reached its operating level, 
i.e., it has '"bootstrapped". 

The outputs of the three thrust chamber pressure switches (TCPS's) 
of each liquid engine are majority voted to provide an engine operation 
status signal. The TCPS's are calibrated to switch when engine chamber 
pressure has attained 77% of nominal operating pressure. The receipt 
of nominal chamber pressure indications from all five liquid engines 
is a condition to initiate the solid rocket motor ignition sequence. 

The SRM ignition command fires redundant squibs located in the Safe 
and Arm device of each SRM. A pyro train provides the required energy 
to ignite the main propellant grain, providing a nominal thrust build 
up in 250 msec. The grain is designed to produce an initial thrust of 
1.5 million pounds which regresses to approximately 1.1 million pounds 
in 115 seconds, followed by a 15 second tail-off. 

The nozzle operating temperature is more than sufficient to burn 
off the aluminum "pyro-seal" closures at the outlet of each TVC injec- 
tant valve, thereby activating the thrust vector control subsystem. 

Side forces of up to 100,000 pounds are provided to each SRM by the 
thrust vector control subsystem on command signals from the core. 
Pressurized N 2 O 4 is injected into the nozzle exit cone through six 
electromechanical valves in each quadrant which deflect the exhaust 
gases through the formation of an oblique shock wave in the SRM nozzle. 

Shortly after end of web action time, sensed deceleration initiates 
the SRM staging timer. At a preprogrammed time Interval, the forward 
attach explosive nuts, the aft explosive attach bolts, and the staging 
rockets are activated. The SRMs are staged simultaneously in pairs 
such that the resultant direction is down and away from the core vehicle. 
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At T+130 seconds a core-orblter overlap burn is Initiated by start- 
ing two of the three orblter main engines. Depletion of either or both 
of the core propellants commands LRE shutdown and orblter staging at 
approximately T+277 seconds. 

Exhaustion of either or both core propellants is determined by 
the liquid engine TCPS's which are monitored during an appropriate time 
interval (TOPS enable). The core engine shutdown sequence is initiated 
when the first of the five TOPS signals indicates that engine chamber 
pressure has decreased to 77% or less of nominal operating pressure. 

As in the engine start sequence^ each of the five TOPS signals is a 
resultant of the indications of three majority voted pressure switches. 

At T+282 seconds^ the third orblter main engine is started. The 
orblter attains orbit inject velocity at approximately T+44A seconds. 

The sequence of major events from propellant loading to orbit inject 
is presented in Table IV-3. The ascent trajectory profile is shown 
in Figure IV-13. 
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TIME 
T-72 Hrs 
T-60 Hrs 
T-12 Hrs 
T-8 Hrs 
T-195 Min 
T-35 Sec 
T-34 Sec 
T-3.0 Sec 
T-0.25 Sec 
T-0 

T+5.6 Sec 
T+126 Sec 
T+130 Sec 
T+277 Sec 
T+282 Sec 


TABLE IV- 3 
SEQUENCE OF EVENTS 

EVENT 

Complete propellant loading. 

Pressurize tankage. 

Ordnance arming. 

Final pressurization adjust. 

Start final countdown 

Automatic sequence start. (terminal count) 
Initiate prevalve opening. 

Start LRE ignition sequence. 

Initiate SRM Ignition. 

Liftoff. 

Vehicle clear of pad structure. 

SRM burnout and staging. 

Start two orbiter main engines. 

Booster LRE shutdown and booster staging. 
Start Orbiter No. 3 engine. 

Orbit Inject. 


T4444 Sec 
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Figure IV- 13 Aecent Trajectory Sequencing Profile 
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SECTION IV-C Propulsion System Analyses 


TITAN III L Operational Flow 


TEST Equipment List 


Control Sequence and Logic Summary 


Launch Support Equipment Operation 


FMEA Ground Rules 


Safety 
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A T-IIl L operational flow diagram Is presented as Figure IV-14. 

The flow diagram depicts major operations and time Increments associated 
with the core^ liquid rocket engines and the solid rocket motors from 
the manufacturing facility through launch operations. The test equip- 
ment list has been formulated for each applicable time period and is 
presented in summary form in Figure IV- 15. 

A control sequence and logic summary Is presented in Figure IV- 16. 
The sequence and logic summary deals primarily with the terminal count 
(T-35 sec.) and the operational phase of the booster. A discussion 
of the countdown operation and the electrical launch support equipment 
follows the diagram. Figure IV-lT shows the relative location of the 
electrical launch support equipment. 
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Figure IV-14 JITAN MIL OPERATIONAL FLOW DIAGRAM 










TEST EQUIPMENT 
LRE 

1. Rocket Engine 
Test Set 


2. Instrumentation 
Test Set 


3. Ordnance Test 
Set 


USE 


1. The Rocket Engine Test Set is used 
to accomplish the following: 

A. Leak Tests 

a. Propellant Systems 

b. Turbopump Seals 

c. Hot Gas Systems 

B. Functional Tests 

a. Thrust Chamber Pressure 
Switches (TCPS) 

b. Thrust Chamber Valves (TCV) 

C. Electrical Continuity Tests 

a. Start Cartridge Squib Wiring 

b. TCV Pressure Sequencing 
Valve (PSV) Override 
Solenoids 

c. Thrust Chamber Pressure 
Switches 

D. Electrical Resistance Tests 

a. Start Cartridge Squibs Cir> 
cult Wires to Engine Frame 
Ground 

b. TCPS to Engine Frame Ground 

c. TCVPSV Solenoid to Engine 
Frame Ground 

2. The test set is used to test temp- 
erature transmitters, pressure trans- 
mitters, thermocouples, frequency- 
to-dc converters, thrust chamber 
valve potentiometers, and position 
indicators. The test set performs 
two insulation resistance checks, 
continuity/resistance check, zero 
stimulus check, S07> or 757. stimulus 
checks and a frequency check. 

3. This portable test set is comprised 
of ordnance test equipment and an 
adapter cable, and is used to check- 
out ordnance devices, ordnance wiring 
and to check for stray voltages prior 
to installation of live devices. 


Figure IV-15 Propulsion Test Equipment List 



TEST EQUIPMENT 


USE EQUIPMENT LIST 


Turbopump Pres- 
sure Leak Test 
Kit 

4. 

Verify integrity of turbopump seals. 

2 

SRM 




Electromechanical 
Valve Test Set 

1. 

Verify TVC EMVs are functioning 
properly^ and do not leak. 

1 

TVC Test Kit 

2. 

Verify TVC EMVs are functioning 
after being installed in the mani- 
fold^ and/or to the SRM. 

2. 4 

Critical Circuit 
Verification Test 
Set 

3. 

Verify the Integrity of SRM elec- 
trical circuits. 

1, 4, 5 

TVC System Pres- 
sure Leak Test 
Kit 

4. 

Establish the integrity of all com- 
ponents and connections in the TVC 
system. 

4, 5 

SRM Pressure 
Leak Test Kit 

5. 

Check for leaks at segment^ head 
end^ and aft end closure flanges 
of the assembled SRM. 

4 

Instrumentation 
Test Set 

6. 

Check operation and calibration 
of SRM instrumentation 

1. ^ 

Ordnance Test 
Set 

7. 

Nondestructive testing of SRM 
ordnance and ordnance circuits. 

2, 4 

CORE 




Electrical Wir- 
ing Test Kit 

1. 

Verify continuity and resistance 
of all wiring. 

1, 4, 5 

Prevalve Test 
Kit, Including 
Boroscope 

2. 

Verify prevalve functions open/ 
close^ verify position before prop* 
loading, and check for foreign ma- 

2, 4 


terlal on top of prevalve. 


Figure IV-15 Propulsion Test Equipment List (Continued) 



IV-40 


TEST EQUIPMENT 

3. Hydraulic Con- 
trol Unit 


COMBINED SYSTEMS 
TEST EQUIPMENT 

1. Electrical Test 
Set 


2. Ordnance Test 
Set 


3. Instrumentation 
Test Set 


Figure 


USE EQUIPMENT LIST 

3. This Item of portable ground equip- 
ment is used to perform fill, flush 
and bleed operations on the core 
hydraulic system. The HCU provides 
the means for stroking the core ac- 
tuators, for commanding the VPDC to 
operate the core electrically driven 
hydraulic pumps, and for monitoring 
hydraulic pressure, hydraulic sys- 
tem reservoir level, and hydraulic 
accumulator precharge pressure. 


1. Verify the integrity of all SRM to 
core and core to engine Interfaces 
and the complete booster electrical 
system. 

2. This portable test set Is composed 
of ordnance test equipment and an 
adapter cable, and is used to check- 
out ordnance devices, ordnance wir- 
ing, and to check for stray voltages 
prior to Installation of live devices. 

3. Used to test temperature and pres- A, 5 

sure transmitters, thermocouples, 

frequency converters, thrust chamber 
valve potentiometers and position 
Indicators. The test set also checks 
Insulation resistance, and continuity/ 
resistance. It can also be used to 
step calibrate. 
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An overview of the countdown operations and the electrical launch 
support and checkout equipment is presented here to show the relation- 
ship of that equipment to the propulsion systems during launch opera- 
tions. The launch control system is divided between the Launch Umbilical 
Tower (LUT) equipment room and the Firing Control Room at the VAB. The 
launch sequence consists of an R-Count which starts at approximately 
T-28 hours and a T-Count which starts at T-195 minutes and terminates 
at T-0. The vehicle is brought to a state of readiness during the 
R-Count via manual checks and operations under the direction of the 
pad test conductor. During the R-Count, the propellant tanks are 
loaded and pressurized under the control of the Propellant Transfer 
and Pressurization Control Set (PTPCS), and the ordnance is installed. 

The propellant tank vents are removed near the beginning of the T- 
Count, T-195 minutes. During the T-Count, at approximately T-45 minutes, 
the final flight controls check is conducted utilizing the vehicle check- 
out set (VECOS). This equipment verifies the proper operation of the 
flight controls system and the propulsion system gimbal actuators and 
thrust vector control valves by applying discrete input commands and 
monitoring for the proper response. The VECOS automatically controls 
the test by means of a tape programmer. The T-Count is semi-automatic 
consisting of a number of manual functions under clock control until 
T-35 seconds at which time the sequence is completely automatic. 

The Control Monitor Group (CMG) controls the time and event 
based countdown for the T-III L booster, see Figure lV-4. The CMG 
is under direct control of the Launch Control Console (LCC) via the 
Data Transmission System (DTS) . The CMG receives command signals 
from the LCC for commencing, resetting, holding, and resuming the 
countdown. The CMG sends signals to the LCC indicating that signals 
have been received and certain actions have been taken, and to ident- 
ify holds. The CMG has the capability to issue control functions, 
monitor launch functions, provide hold, kill and shutdown capability 
during the launch sequence, reset the system, patch input and output 
signals, provide simulation signals during combined systems test, and 
drive the countdown readout indicators at the pad and in the Firing 
Control Room. 

During the T-Count, power is applied to the SRM squib firing cir- 
cuits when the pad safety officer installs red arming plugs in the 
Van Power Distribution Control (VPDC) rack. 

The Data Recording Set (DRS) is initialized during the T-Count. 

The DRS records the time and change of state of discrete signals and 
events during the launch sequence. It receives timing Information 
from the CMG. The DRS is used for troubleshooting and fault Isolation 
of countdown sequence malfunctions. A remote DRS is provided in the 
Firing Control Room. 
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At approximately T-2 minutes In the count, all Instrumentation 
recorders are started. Data from these recorders is subsequently used 
for postfllght data evaluation of the booster telemetry and landllne 
instrumentation measurements. The recorders are part of the Ground 
Instrumentation Equipment (GTE) which Is located In the Instrumentation 
Room adjacent to the Firing Control Room In the VIB. In addition to 
recorders, the Instrumentation In the VIB consists of a Control Console, 
receiving antenna, receivers, decoding equipment and patching capability 
The GIE in the instrumentation room interfaces with GIE located in the 
LUT. The GIE in the LUT consists of signal conditioners, patching and 
encoding for landline measurements, and voltage controlled oscillators 
to modulate signals for transmission to the Instrumentation room. 

At T-35 seconds, the automatic terminal count is Initiated. From 
this point through ignition of the SRMs, sequencing of events is control 
led by the CMG which issues the required commands at preprogrammed times 
and assesses feedback signals to be considered as prerequisites for 
subsequent commands. 

At approximately T-20 seconds the CMG commands chat the SRM Igni- 
tion circuits be tested. This command causes a test current of low 
amperage to be sent through the ignition circuits to verify proper 
installation of the live ordnance device. Stray voltage detectors 
(SVDs) in the SRM igniters trip as a result of the test and light SVD 
monitor lights on the flight safety rack. The SVD monitors are then 
reset via the CMG. 

At approximately T-15 seconds the CMG initiates the countdown 
steering test which is the final prelaunch test of the Guidance and 
Control Equipment. The CMG verifies that the LRE actuators and TVC 
valves move off null during this test. 

At approximately T-10 seconds the CMG commands and verifies the 
arming of all ordnance. 

At T-3 seconds the CMG initiates the Liquid Rocket Engine (LRE) 
start sequence. The closure of all thrust chamber pressure switches 
(TCPS) on the LREs provides the CMG with the indication that LRE 
chamber pressure is sufficient to permit ignition of the SRMs at 
approximately T-0.25 seconds. 
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FMEA GROUND RULES 


1. The FMEA shall be conducted for the operational mode only. 

2. The FMEA shall be conducted on all components identified in 
the Titan III L propulsion system definition. (Structural 
members which perform no function other than providing struc- 
tural integrity are excluded.) 

3. Electrical cables, wiring harnesses and instrumentation shall 
be excluded from the FMEA, except where such equipment (such 
as sensors) is required for control functions within the pro- 
pulsion subsystem. 

4. It is assumed that the proper electrical signal is always trans- 
mitted from the control source to the propulsion component 
requiring such a signal. 

5. Human errors are not to be considered in the failure modes and 
effects analysis . 

6. Failure modes and effects of active and passive thermal pro- 
tection devices shall be excluded. 


7. Leakages considered in this analysis shall be to the degree most 
probable; taking into account the leak path, sealing method, 
pressure and medium Involved in the area under consideration. 
Leakage requiring a structural failure of the component shall 
not be analyzed. 


8. Redundant components shall be identified. 

9. The following criticality categories shall be utilized for 
potential effect of component failures: 


Cate a o .ry. 

1 

2 

3 


Potential Effect of Failure 
Loss of life or vehicle 
Loss of mission 
All others 


a) Launch delays shall be classified as criticality 3. 

b) The transition point from launch delay, criticality 3 
above, to loss of mission, criticality 2, is considered to 
occur at the ignition of the solid rocket motors. 
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c) For this analysis, the loss of one engine shall be 

considered as loss of mission (criticality 2) since the 
mission requirements and vehicle capability with one 
engine out are not fully defined at this time. 
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CHECKOUT AND MONITORING SAFETY REQUIREMENTS 


Evaluations of safety requirements haying a direct Impact on the 
OCMF have been primarily directed toward ordnance devices. It has been 
determined that the existing devices, their handling, checkout, and 
monitoring are In accord with the T III L requirements. 

The ordnance Installation and checkout Is accomplished during the 
28 hours prior to lift off. During this time period and up to 195 
minutes before launch the vehicle Is under the manual control of the 
test conductor. The test conductor oversees the Installation of ordnance. 
These operations are accomplished by following approved operating and 
safety procedures. 

The handling of ordnance device? Is controlled by procedures which 
meet accepted safety regulations. The ordnance devices are transported 
to and around the launch vehicle with an ordnance carrying case which 
provides shock proof storage for those devices. 

Prior to all ordnance Installations a Standard Ordnance Circuit 
Verification Unit (SOCVU) Is used during simulation tests to verify all 
ordnance circuits. During installation, an Ordnance Item Test Set (OITS) 
is used by the installer to verify that the circuits are safe for ordnance 
connection. 

One of the major tasks of the ordnance system Is to start the Solid 
Rocket Motors. This task is accomplish by the SRM igniter assembly which 
is composed of three major components(Figure IV-20) : The safe and arm device, 
initiator and the main igniter charge. The main igniter charge provides 
sufficient hot gases to Ignite the SRM propellant. The initiator provides 
the necessary Ignition step between the safe and arm device and the larger 
Igniter. The safe and arm device is the control and firing unit for the 
initiator/ignitor assembly. The safe and arm device is mounted in the 
igniter top boss and contains dual ignition squibs. The squibs are fired 
by a 28 VDC charge and ignite at 4.5 amps. The 28 volt charge to the 
squibs originates at the Transient Power Supply (TPS) bus in the core and 
is switched to the squibs via a Squib Firing Circuit (SFC) in the core 
vehicle. 

The safe and arm device used in the SRM Ignition train is of particular 
Interest. The major components of this device are shown in Figures IV- 18 
and IV-19 . Figure IV-21 is an electrical schematic of the unit and the 
connecting circuitry. This device incorporates the following safety features: 
A housing which interferes with easy access of the squibs wheather the device 
is in the safe or arm position (Figure IV-19). This housing also prevents 
the output from the squibs to reach the SRM igniter unless the squibs are 
directed at this window only when the device is in the arm position (Figure 
IV-18); if the squibs inadvertently fire while in the safe position, the 
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MECHANICAL SAFETY LOCK 



.A-'"' 



FIGURE IV-18 


SAFE AND ARM DEVICE SQUIB LOCATION AND AIM 
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FIGURE IV- 19 DISMANTLED SAFE AND ARM DEVICE 




SAFE & ARM DEVICE 
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FIGURE IV- 20 


SRM IGNITER ASSEMBLY 


K3QITER NOZZLES 



Red Arming Plug 



Figure IV-21 


SRM Ignition Circuitry 


NOTE: SSM Ignitor Initiator is Replaced with Standard Ordnance 

Circuit Verification Unit (SOCVU), and Inert Initiator 
Until Live Ordnance Installation. 
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output will be dissipated within a free space of sufficient volume to 
prevent rupture of the window. To check electrical continuity a squib 
simulator (resistor-switch) is connected to the firing circuit when the 
device is in the safe position. To fire the squibs^ the squib retainer 
must be rotated 120 degrees so that the squibs face the blowout window 
(Figure IV-18). The arming signal rotates the squibs to the firing 
position. After approximately 105 degrees of rotation the circuit is 
complete; rotation ceases when the shaft has turned 120 degrees. When 
the squibs are in the safe position they are disconnected from the firing 
circuit and are short circuited. An externally visible letter^ A for 
armed and S for safe^ are aligned with the safe-arm mechanism to Indicate 
device status (Figure IV-19), Also^ internal shaft operated switches 
permit remote indication of device status, A manually engaged lock pre- 
vents actuation of the device (Figure IV-19). Once this lock is removed 
the unit can only be armed electrically^ however, the device can be 
either electrically or manually actuated to the safe position. A temp- 
erature control switch prevents the overheating of the squib simulator 
resistors and prevents inadvertent firing. The device and its housing 
retains the SRM ignitor pressures. 

In order to check out or operate the safe and arm device, manually 
installed arming plugs located in the GSE must be in place. The sequence 
of tests performed on the safe and arm circuitry and their purpose is 
shown in Table IV-4. 



PERFORMED TIME DESCRIPTION OF TEST OR TASK PURPOSE OF TEST OR TASK 


IV-53 


d 

a 

u 


o 

o 

a 

ce 

p 

o 

u 

o 

4-1 • 

•H AJ 
4J 

td o 

d 4^ 

d) u 
u p 
^ > 


•o 

o 

u 

o 

4J 

*ri 

§ 



> « 
•fi 




•H CQ 

« 4J 
> « 

o ^ g, 

H 4-» 


4J 0 

cd 

cd *o 
CU 0) 
01 ^ 
u to 

P4 U 


o 

4J 

09 

iH 



44 

U 0 

CO P 

WJ 

v4 

to 


U M 

o 

CO 

1-4 

44 

P 1-1 

x: -H 



O 

O 44 

O 4-) 

03 • 

g 


s 

P P4 

P p 

O 


4J 

P 

i4 ^ 

1-4 

O 

P o 

td (4 

44 O 

4J 

3! 

03 44 

r4 o 


fi 

x: 

i4 

QO 

•C3 60 

u 

o -u 

o *d 

34 03 

R P 

03 

p 

i4 m 

o *o 

Q 

O* 

U 03 

44 i4 

44 


O 

O U 

44 1-4 


4J P 


44 U 

P O. 

09 to 

to *0 

D 

P 

to CU 

P td 

03 

5 

03 O 

»4 

.Ps w 

O 4J 
f4 

"•S 


r-l Cu 
CU 
O P 

o 0) 
H .Q 




H 05 
CO 

0 01 

^Jd 

4J 

(0 P 

01 
H 

•o 

i;s 

01 

4J Cj 
to 4J 
>> » 
CO P 
•H 

•o 

03 0) 

5 s 

'i w 

o u 


4J 

P 

0) 

to 

a 


Vr 

O 

4J 4J 
p td 
0 ) 1-1 
W 4J 

u 1 -r 
P P 
O 1-1 

^ 4J 
§ 


td 03 03 
P B ^ 

bO *r-( 4J 



§ d 
o o 
o u 


r! > 


•S 


JS 

e 

4J td 
t» 

0) 03 
*j x: 

4J 

?2 

O 0) 
O M-l 
ON to 

V ” 

03 

O 4J 

o 

in a 

A 2 

^-^4-1 


to 

03 Pu 

x: M 

4J 3-4 
4J 
ta 

-T-J 4J 

> p 
03 

4J ^4 

P U 
<D p 
to C3 

QQ to 
1-1 1-1 
XS 
^ H 
to 

Oi 

I >: 

o 

m +J 

A 4S 



_ w td 
V4 O Q Ul 
03 CO > 03 
P „ CO o< 
^ O 


p x: 

P 03 

^ ►I 

P 1^ 

03 m *34 

r-4 

3 44 

^ ^4 

03 

x: p CO 03 

03 P 

o * 

34 O 

U 4J 

4J > t- 4 p4 

P F 

*o to td 


34 34 

CA 03 O 

d ^ 


8 " 
g-^ 


C3 

o 

H O 

to 

t-4 

o 


0) 

4J 

P 

O P 

to 

a 

D« 

P 4J 
X P 


x: 

v4 

O 

v4 

P 

44 v4 


-U 

44 

P 1-t 



44 



•H 

Xi 44 

/-N 

44 

60 i4 

e 

o 

P 

44 v4 


P 

P P 

P 

4J 

-r4 

El 


to 

i4 -H 

O 



60 60 

p B 

P 


i4 

Vl 

44 

P i4 

CO 


O 44 

44 

O 

U 

i4 

1-4 


1-4 34 

i4 

f4 


34 S 


P 

1-4 03 

to 

Vi 

P 

P B 

^ X! 

> 

O R 

o 


i4 

Q CO 

^ 4J 

CO 

P4 -H 

a. 




P 

03 n o 
^ i-H td 

5 P- ^4 


H 

CO 

U 

t 

03 

P 

(U 




in 








• 

CO 








1-4 

1 

S4 




o 






H 

x: 







CO 

u 


H 


t 



o 

§ 

5 

CO 


m 



60 

p 

a 

o 

ON 

• 



a 

1-4 

60 

P 




•3 


O 

iH 

1 

1-4 

1 

CO 

1 

0 

1 

g 

60 

P 

i4 

34 

CO 

1 

H 

i4 

34 

H 

H 

H 

H 

1-4 

f-4 

P 


/-V 

/-N 

✓-S 

o 

3 

✓-N 

P 

P 

X 

o 

•0 


P 

P 

• 





• 

• 


C4 





to 




b) T-19 sec The low test current (<1 amp) is applied to the S/A. To verify continuity of firing 

circuit and operation of SVDs 
prior to arming the igniter. 



TABLE IV-4 
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SECTION IV-D Checkout and Monitoring Requirements Analyses 


Checkout and Monitoring Function Applicability 


Trade Studies 


Data Acquisition Requirements 


Measurement List/Designated Usage 


Measurement Selection Criteria 



IV-56 


Identification of the onboard checkout and monitoring functions 
which are applicable to the T-III L has been conducted on work sheets. 

The matrix evaluated the functions against propulsion hardware and the 
measurement parameters identified by the FMEAs. The following identifies 
the evaluation of the functions considered and their use or applicability 
to T-III L expendable Shuttle booster. 

GROUND CHECKOUT - Ground checkout of the T-III L propulsion system 
is required to assure system flight readiness and verify the propulsion 
Interfaces . 

FAULT DETECTION - This function is required for emergency detection 
purposes^ fault isolation^ performance monitoring and postflight evalua- 
tion. 


FAULT ISOLATION - Fault isolation is limited to redundant hardware 
on the T-III L booster - specifically to the liquid rocket engines and 
redundant SRM thrust vector control valves. 

REDUNDANCY MANAGEMENT - This function is limited to propulsion 
items discussed under fault isolation. Redundant sensors^ however, are 
employed for critical parameters. Their redundancy management is handled 
by electronic majority voting techniques. 

EMERGENCY DETECTION - Emergency detection is directly applicable for 
identification of impending or actual failures which could result in loss 
of life, vehicle or mission. 

CAUTION AND WARNING - C&M will be utilized to inform the orbiter crew 
of an impending or actual emergency. 

PERFORMANCE MONITORING - This function is primarily utilized for post- 
flight evaluation and emergency detection. 

DATA STORAGE - Onboard data storage is not directly applicable to the 
T-III L concept. Selected data will be relayed to the ground for evaluation 
and s tor age . 

DISPLAY - Selected booster information will be displayed to the orbiter 

crew. 


POSTFLIGHT EVALUATION - A complete postflight analysis will be con- 
ducted after each launch. This analysis will use the data sent via T.M. 

Such things as engine performance, steady state and transient, specification 
compliance and trends that begin to develop will be noted and recorded. 
Finally, if any malfunction occurred that could not be fault isolated 
during the flight, the postflight analysis will attempt to do so. 
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Trade Studies directed toward Control, Monitoring, and Checkout 
are presented on pages (lV-58 through IV-62) . The results of these 
are incorporated within the study and discussed in Section IV-E. A 
Data Acquisition Requirements listing follows the trade studies. The 
measurement llst/deslgnated usage is shown in Table IV-8. The measure- 
ment selection criteria is presented in Table IV-9. 



VEHICLE GROUND CHECK, SYSTEMS TRADE STUDY 
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Maximum integration of orbiter/booster . Orbiter equipment would be needed for Battle- 

systems. ship and ISMU. 

. Orbiter GSE must interface or provide flight 
safety C/0 equipment. 
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CONCLUSION - Based on its advantages of operational capability, crew considerations, costs, and 
technical capability, the Conventional Titan III GSE can meet the requirements of vehicle ground 
checkout for the Titan III L Booster, and therefore it is recommended. Both the Orbiter Onboard 
GSE and New Facilities or GSE fall behind the Conventional Titan III GSE in meeting the above mei 
tloned criteria. 
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MONITORING OPTIONS TRADE STUDY 

The monitoring options considered for use during flight and ground 
checkout^ before and after the booster and orbiter are mated, are: 

a. Inflight monitoring by orbiter onboard equipment. 

b. Inflight monitoring by telemetry. 

c. Monitoring during mated phases with orbiter onboard equipment. 

d. Monitoring during mated phases with GSE. 

e. Monitoring during premated phases with existing GSE. 

f. Monitoring during premated phases with new GSE. 

The inflight monitoring of the booster propulsion system and the 
SRMs can be accomplished with either the onboard equipment (a) or with 
telemetry (b) . The telemetry method is currently used for Titan III 
launches and can be adapted to the Titan III L configuration. This 
modification would basically consist of an expansion of the current 
design to handle the additional information from the larger core and 
additional SRMs. Using this method, existing technology, operations and 
proven equipment can provide a cost effective way of monitoring flight 
propulsion data. 

Providing monitoring through the use of orbiter onboard equipment 
would provide the crew with the direct performance data and allow the 
use of new technology; however, the increased interface and equipment 
development costs, which could not be readily transferred to a recover- 
able booster does not justify developing new equipment, A minimum of 
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orbiter monitoring is expected to be performed for caution and warning 
purposes but the bulk of the data could be handled by existing tech- 
niques, This would provide the most reliable and cost effective method 
for inflight monitoring. 

Ground preflight mated monitoring can be performed by the orbiter 
(c) or with conventional GSE (d) , The same arguments as presented for 
the flight monitoring are applicable here. The most cost effective way 
that will satisfy the monitoring requirements would be to modify the 
existing equipment to handle the additional data. 

The use of the orbiter for preflight mated and flight monitoring 
would also require that new GSE be developed for the unmated checkout 
or use an interface unit that would be able to connect with the orbiter 
interfaces. 

The choice of one monitoring method in one phase^ i,e,^ onboard 
monitoring during flighty dictates which method is most compatible 
in the other phases. The use of the onboard orbiter monitoring during 
flight would allow the use of this same equipment for ground monitoring. 
Also new GSE would be needed to mate with the booster outputs. The 
telemetry method allows the use of modified existing Titan equipment 
throughout the three phases. 

Therefore^ it appears that the most cost effective method of moni- 
toring the large core booster and the 4 SRMs would be to modify the 
existing designs to benefit directly from the many years of Titan exper- 
ience, The development of a new system to monitor an interim booster when 
existing equipment can be utilized does not seem practical. 
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Avionics Description 


TITAN III Propulsion Instrumentation Summary 


Instrumentation Location 


0 
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TITAN III L PROPULSION RELATED AVIONICS 


I. GENERAL - The avionics related to the propulsion system consists 
of portions of the electrical and electronic subsystems. An 
overall view of the interconnections between propulsion and 
avionics is shown in Figure IV-22, The purpose of the avionlc- 
to-propulsion interconnections are discussed in the following 
paragraphs, 

II. DIGITAL INTERFACE UNIT (DIU) - The DIU's are extensions of the 

orbiter central Computer Complex (CCC) . These units provide the 
interfaces between the booster avionic subsystems and the CCC via 
the digital data bus. Propulsion related signals which interface 
with the DIU*s, (Reference Figure IV-23) are as follows: 

1. Steering and Dump signals are provided from the DIU to the 
booster TVC driver electronics package. The steering sig- 
nals are issued in accordance with the desired flight atti- 
tude which is controlled by the orbiter. The dump signals 
are issued from the orbiter in accordance with a nominal 
preprogrammed dump schedule. The TVC electronics interprets 
the steering and dump signals and provides the outputs re- 
quired to drive the actuator valve coils in the LRE's and 
the Injectant valve positioning electronics in the SRM*s, 

The TVC driver electronics integrates the outputs to the 
SRM valves to determine the total Injectant fluid usage 



To Orbiter Data Bus 
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Figure IV-22 Titan III L Propuls i<m Related Avionics 




To Orbiter 

Computer orbiter 

Data Bus a 
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Figure IV-23 DIUyOrbiter/GSE Interfaces 


Item Discretes SRM Steering Ground 

Discretes Electro Hydraulic Support 

7VC Valves Equipment 
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a) Open prevalves 

b) Start 

c) Shutdown 

Discrete signals provided to the SRM's include: 

a) Start 

b) Thrust Temination 

c) Staging 

III. TITAN III L INSTRUMENTATION SYSTEM - The instrumentation system 

proposed for T III L is similar to systems flown on 17 successful 
Titan III flights to date. The Titan III instrumentation systems 
evolved as a result of experience gained on earlier missile pro- 
grams coupled with state-of-the-art hardware advances and require- 
ments changes. The specific system proposed for T III L is based 
on the system proposed and partially developed for T III M. The 
Instrumentation Stumnary (Table IV-IO) indicates range^ sample rate 
and other information applicable to T III L propulsion measurements. 
Figures IV- 24 and IV- 25 locate measurements/sensors within a LRE 
subsystem and an SRM subsystem. The operation and interface re- 
quirements for the instrumentation system are discussed in the 
following subparagraphs. 

1. The Typical Sequence of Operation for propulsion measurements 
sensed and transmitted by the T III L instrumentation system 
are shown in the block diagram (Figure IV- 26) • The measure- 
ment originates as an electrical signal from some source 
such as a pressure transducer, bus voltage or discrete switch. 



versus flight time and adjusts the SRM steering-dump commands 
to correspond with the preprogrammed dump schedule. 

Rate and lateral acceleration inputs from booster flight 
control components are sent to the orbiter via the DIU. 

The booster rates and accelerations are used in conjunction 
with orbiter attitudes and rates to determine the steering 
required. 

Malfunction Detection Logic outputs from the booster are 
provided to the orbiter CCC via the DIU. The Malfunction 
Detection Logic outputs provide the status of booster para- 
meters which can indicate that a hazardous condition exists 
on the booster. The booster propulsion parameters monitored 
by the Malftinction Detection Logic include: 

a) Oxidizer tank pressure 

b) Fuel tank pressure 

c) Thrust chamber pressure switches 

d) SRM chamber pressure 

e) Temperature, Gearbox Bearing No. 6 

f) Detector SRM Burnthrough 

Discrete Sequencing and Driving Circuit inputs from the DIU 
and Malfunction Detection Logic are provided to control LRE 
and SRM functions. Discrete signals provided to the LRE*s 
include : 

a) Open prevalves 
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NOTES : 

1. Response time is limited by the physical characteristics of the 
sensor and/or the rate at which the measurement is sampled. Generally 
transducer response is much faster than the response allowed by the 
instrumentation system sample rate. For the purpose of this table 

it was assumed that the response of telemetered measurements is always 
limited by the sample rate. Therefore, since 5 samples are required 
to define 1 cycle of data, the response rate for analog measurements 
is equal to 1/5 the sample rate. 

2. Accuracies given are based on error analysis for identical measurements 
on previous Titan III vehicles. The accuracies given include some 
transducer and system errors which can be calibrated out. The "trans- 
ducer” accuracy column lists the physical equivalent for the sum of 
the applicable transducer errors. The "total system" accuracy column 
lists the equivalent engineering units for the root - sum - square 

of the applicable system errors such as transducer, signal conditioning, 
airborne encoding, ground decoding, and recorder errors. 

3. Accuracies given are new values specifically derived for T III L 
because of the new measurement range. 

4. Measurement was not flown on previous Titan vehicles. The new measure- 
ment was evaluated and the required information derived and assigned 
specifically for T III L. 

5. Accuracy is not applicable to this bi-level measurement. The maximum 
response time for airborne bi-level measurements is equivalent to 
the time-span between telemetry system samples. The airborne system 
sample rate and response columns do not apply to bi-level land line 
outputs as these outputs are continuously monitored by ground control 
logic and the data recording set. 

6. Land line output only. 

7. Landline measurement only, therefore, airborne system response and 
accuracies do not apply. 

8. Accuracy information has been approximated for this measurement and 
is based on error analysis for similar type core measurement. (See 
Note 2). 

9. This measurement is listed under new technology required because 
further investigation is required to establish sensor type and derive 
other measurement information. 
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b) Start 

c) Shutdown 

Discrete signals provided to the SRM*s include: 

a) Start 

b) Thrust Termination 

c) Staging 

III. TITAN III L INSTRUMENTATION SYSTEM - The instrumentation system 

proposed for T III L is similar to systems flown on 16 successful 
Titan III flights to date. The Titan III instrumentation systems 
evolved as a result of experience gained on earlier missile pro- 
grams coupled with state-of-the-art hardware advances and require- 
ment changes. The specific system proposed for T III L is based 
on the system proposed and partially developed for T III M prior 
to the cancellation of that program. The instrumentation summary 
(Table IV-1) indicates range^ sample rate and other information 
applicable to T III L propulsion measurements. Figures IV-12 and 
IV-13 locate measurements/sensors within a LRE subsystem and an 
SRM subsystem. The operation and interface requirements for the 
instrumentation system are discussed in the following subparagraphs. 

1. The Typical Sequence of Operation for propulsion measurements 
sensed and transmitted by the T III L instrumentation system 
are shown in the block diagram (Figure IV-14). The measurement 
originates as an electrical signal from some source such as 
a pressure transducer, bus voltage or discrete switch. 
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If the electrical signal is not compatible with the re- 
quired inputs of the Remote Multiplexer Unit (RliU)^ it 
is sent to a signal conditioner where it is transformed 
into a conq>atlble signal. The signal is then sampled and 
amplified in the RMU and upon command from the RMIS Con- 
verter Unit (CU), the signal is sent to the CU in (Pulse 
Amplitude Modulated) PAM form. The CU transforms the PAM 
signal into digital form and places the digital information 
in a serial binary pulse train which modulates the PCM/FM 
transmitter. The transmitter amplifies, and provides the 
S-Band RF carrier on which the PCM wave train is transmitted 
to ground receiving stations for decoding, recording and 
display of data. 

2. Ground Interfaces with the airborne instrumentation system 
are required for test and checkout as follows: 

a. The PCM landline outputs are used to present the RMIS 
outputs to the ground station without the use of the 
RF subsystem. This method of monitoring the PCM 
outputs is used during subsystem testing and when it 
is expedient not to radiate RF. 

b. Ground Instrumentation Equipment (GIE) must be mated 
directly with the RMIS converter unit to program the 
memory of the CU. This operation is performed to obtain 
the desired sample rate for all applicable measurements. 

c. Certain tank Instrumentation such as temperature trans- 


ducers may also be monitored by propellant GSE during 
and following liquid propellant loading operations. 








L-S/A PgMHE 

ON/OFF 0/1000 



TVC TANK ASSEMBLY 
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Figure IV-26 Titan III L Inatrumentation 


Data o-Ddiiu 

(High Freq) ^ ^ Modulator ^ ^ Transmitter 
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IV. TITAN III L SRM ELECTRICAL SUBSYSTEMS - The SRM contains 3 sub- 
systems which involve avionics. The functions performed by 
the SRM subsystems^ in conjunction with the electrical/electronic 
signals and components involved, are shown in ^Figure IV- 27 and 
discussed in the following paragraphs, 

1, The SRM ordnance electrical subsystem provides for SRM 
ignition, staging, and thrust termination as well as an 
Inadvertent Separation Detection System (ISDS). The 
ignition and staging functions are performed upon receipt 
of discrete commands from the core vehicle. The thrust 
termination function is capable of being activated either 
by the core or by the ISDS. 

The ISDS provides the required logic, power and ordnance 
for thrust termination of the SRM should it become inadver- 
tently separated from the core. Power for all other ordnance 
subsystem functions is supplied from the core transient power 
system (TPS) . 

2. The SRM Thrust Vector Control (TVC) subsystem is used to 
provide SRM steering via the injection of liquid nitrogen 
tetroxide (N 20 ^) into the nozzle exit cone to deflect the 
exhaust gases , Twenty-four electromechanical Injectant 
valves are arranged in groups of six around the 4 quadrants 
of the exit cone. The valves control the flow of injectant 
in accordance with 0 to 10 volt command signals received 
from the TVC driver electronics in the core vehicle. While 
steering is accomplished via the injection of Fluid in the 
Individual quadrants, excess injectant fluid is **dumped” 
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equally in all quadrant s, TVC power is derived from the 
TVC battery during flight. Before launch, ground power is 
supplied through the ground power umbilical. On command 
from the ground, a motor actuated switch connects the TVC 
battery (s) to the power distribution bus, 

3, The SRM instnunentation subsystem monitors performance of 
the SRM system during countdown, launch and flight and pro- 
vides data for major malfunction analysis. Performance 
parameters, in the form of analog signals, obtained from 
transducers and monitors located throughout the SRM, are 
routed to the aft Instrumentation box, and on to a remote 
multiplex unit. The analog signals are sampled and amplified 
in the RMU and upon command from the core RMIS converter 
unit (CU), the signal is sent through the forward staging 
disconnects to the CU in PAM form, 

4, The SRM ground power umbilical is used to provide ground 
power, vehicle monitor power and commands from ground equip- 
ment, Monitors required to determine the status and perform- 
ance of the ordnance electrical system for ground checkout, 
combined systems test, and launch countdown and holds are 
provided to ground facilities via the SRM ground power um- 


bilical 
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Figure IV- 27 TITAN III L SRM AVIONICS 
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